ZDI-CAN-19232: ZDI-23-092: RARLAB WinRAR ZIP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Published Jan 20, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
RARLAB WinRAR
Event History
Jan 20, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Feb 23, 2025
Advisory Published
via ZDI·10:36 PM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19232?
The severity of ZDI-CAN-19232 is low with a severity value of 2.5.
2
What is the affected software of ZDI-CAN-19232?
The affected software of ZDI-CAN-19232 is RARLAB WinRAR.
3
How can I exploit ZDI-CAN-19232?
To exploit ZDI-CAN-19232, the attacker requires the target to visit a malicious webpage or open a malicious file.
4
How can I fix ZDI-CAN-19232?
To fix ZDI-CAN-19232, it is recommended to update RARLAB WinRAR to the latest version available, as provided by the vendor.
5
Where can I find more information about ZDI-CAN-19232?
You can find more information about ZDI-CAN-19232 on the Zero Day Initiative advisories page and the RARLAB WinRAR website.