CVE-2024-33899: High severity winrar vulnerability
Published Apr 28, 2024
·Updated
Last updated 12 March 2025
Other sources
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
— NVD
Affected Software
6 affected componentsFixes available
RARLAB WinRAR<7.00
debian/rar<=2:6.23-1~deb11u1, <=2:6.23-1~deb12u1
2:7.11-1
debian/unrar-nonfree<=1:6.0.3-1+deb11u3, <=1:6.2.6-1+deb12u1
1:7.1.6-1
All of the following
RARLAB WinRAR<7.00
Any of the following
Linux Linux kernel
Opengroup Unix
Event History
Apr 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Apr 29, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 AM
Affected Software
Mar 16, 2025
Data Sourced
via Ubuntu·09:40 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·09:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-33899?
The severity of CVE-2024-33899 is classified as high due to its potential to cause denial of service and screen output spoofing.
2
How do I fix CVE-2024-33899?
To fix CVE-2024-33899, update WinRAR to version 7.00 or later.
3
What platforms are affected by CVE-2024-33899?
CVE-2024-33899 affects WinRAR on Linux and UNIX platforms prior to version 7.00.
4
What types of attacks are possible with CVE-2024-33899?
CVE-2024-33899 allows attackers to spoof screen output and potentially cause denial of service.
5
Is CVE-2024-33899 an exploit that can be used on Windows?
CVE-2024-33899 specifically affects Linux and UNIX versions of WinRAR and does not apply to Windows.