CVE-2022-43650: RARLAB WinRAR ZIP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ZIP files. Crafted data in a ZIP file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-19232.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ZIP files. Crafted data in a ZIP file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43650?
CVE-2022-43650 is a vulnerability in RARLAB WinRAR that allows remote attackers to disclose sensitive information on affected installations.
How does the vulnerability in RARLAB WinRAR work?
The specific flaw exists within the parsing of ZIP files, leading to an out-of-bounds read information disclosure.
What is the severity of CVE-2022-43650?
The severity of CVE-2022-43650 is high, with a CVSS score of 7.1.
How can CVE-2022-43650 be exploited?
To exploit CVE-2022-43650, user interaction is required. The target must visit a malicious page or open a malicious file.
How can I fix CVE-2022-43650?
To fix CVE-2022-43650, it is recommended to update RARLAB WinRAR to version 6.12 or later, as suggested by the vendor.