CVE-2023-40477: RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
Last updated 12 March 2025
Other sources
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libclamunrarto a version that resolves this vulnerability.Fixed in 0.103.10-1~deb11u1Fixed in 1.0.3-1~deb11u1Fixed in 1.0.3-1~deb12u1Fixed in 1.3.1-1 - Upgrade
Upgrade
debian/rarto a version that resolves this vulnerability.Fixed in 2:6.23-1~deb11u1Fixed in 2:6.23-1~deb12u1Fixed in 2:7.11-1 - Upgrade
Upgrade
debian/unrar-nonfreeto a version that resolves this vulnerability.Fixed in 1:6.0.3-1+deb11u3Fixed in 1:6.2.6-1+deb12u1Fixed in 1:7.1.6-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ZDI-CAN-21233
Event History
Frequently Asked Questions
What is the severity of CVE-2023-40477?
The severity of CVE-2023-40477 is classified as critical due to the potential for remote code execution.
How do I fix CVE-2023-40477?
To fix CVE-2023-40477, update WinRAR to the latest version or apply available patches from RARLAB.
What software is affected by CVE-2023-40477?
CVE-2023-40477 affects RARLAB WinRAR and specific versions of libclamunrar and rar packages on Ubuntu and Debian.
What kind of attack exploits CVE-2023-40477?
CVE-2023-40477 can be exploited through specially crafted RAR files, requiring user interaction to execute the malicious code.
Is user interaction required to exploit CVE-2023-40477?
Yes, user interaction is required to exploit CVE-2023-40477, as the attacker must trick the user into opening a crafted RAR file.