Rarlabs Vulnerabilidad

Cronología

Escribe

File Compression Software11

Producto

RarLabs WinRar9
RARLabs WinRAR2

Contramedidas

Official Fix9
Temporary Fix0
Workaround0
Unavailable1
Not Defined1

Explotabilidad

High1
Functional0
Proof-of-Concept6
Unproven0
Not Defined4

Vector de acceso

Not Defined0
Physical0
Local1
Adjacent0
Network10

Autenticación

Not Defined0
High0
Low1
None10

La interacción del usuario

Not Defined0
Required2
None9

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤50
≤64
≤71
≤85
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤53
≤62
≤75
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤41
≤50
≤63
≤72
≤85
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k1
<2k3
<5k0
<10k2
<25k3
<50k2
<100k0
≥100k0

Explotar hoy

<1k10
<2k0
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (2): WinRAR (2), WinRar (9)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-04-025.35.3RARLabs WinRAR escalada de privilegiosFile Compression SoftwareNot DefinedNot Defined0.000460.00CVE-2024-30370
2023-08-236.36.0RARLabs WinRAR ZIP Archive Remote Code ExecutionFile Compression SoftwareHighOfficial Fix0.354600.00CVE-2023-38831
2014-03-235.34.7RarLabs WinRar Filename autenticación débilFile Compression SoftwareProof-of-ConceptUnavailable0.000000.00
2007-02-087.36.4RarLabs WinRar RAR Archive unrar desbordamiento de búferFile Compression SoftwareProof-of-ConceptOfficial Fix0.085510.00CVE-2007-0855
2006-07-197.36.4RarLabs WinRar LHA Archive desbordamiento de búferFile Compression SoftwareProof-of-ConceptOfficial Fix0.151490.00CVE-2006-3845
2005-10-117.37.0RarLabs WinRar ACE Archive UNACEV2.DLL desbordamiento de búferFile Compression SoftwareNot DefinedOfficial Fix0.091290.00CVE-2005-3262
2005-10-117.37.0RarLabs WinRar UUE/XXE File Format StringFile Compression SoftwareNot DefinedOfficial Fix0.091290.00CVE-2005-3262
2004-12-227.36.9RarLabs WinRar Archive File Delete desbordamiento de búferFile Compression SoftwareProof-of-ConceptOfficial Fix0.027260.00CVE-2004-1254
2004-11-024.03.8RarLabs WinRar Repair Archive Feature denegación de servicioFile Compression SoftwareNot DefinedOfficial Fix0.008290.04CVE-2004-1495
2003-09-195.35.0RarLabs WinRar Directory divulgación de informaciónFile Compression SoftwareProof-of-ConceptOfficial Fix0.001790.00CVE-2003-0282

1 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 1 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!