Количество 3
Количество 3
CVE-2018-20250
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.
GHSA-7v9q-j964-43qc
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.
BDU:2019-00860
Уязвимость библиотеки unacev2.dll архиватора файлов WinRAR, позволяющая нарушителю разместить вредоносные файлы в произвольное место на диске
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-20250 In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path. | CVSS3: 7.8 | 93% Критический | около 7 лет назад |
| GHSA-7v9q-j964-43qc In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path. | CVSS3: 7.8 | 93% Критический | больше 3 лет назад |
 | BDU:2019-00860 Уязвимость библиотеки unacev2.dll архиватора файлов WinRAR, позволяющая нарушителю разместить вредоносные файлы в произвольное место на диске | CVSS3: 9.6 | 93% Критический | почти 7 лет назад |
Уязвимостей на страницу