Lucene search

[email protected]CVE-2018-20250

HistoryFeb 05, 2019 - 8:29 p.m.

CVE-2018-20250

2019-02-0520:29:00

CWE-36

CWE-22

[email protected]

web.nvd.nist.gov

1024

In Wild

winrar

cve-2018-20250

unacev2.dll

path traversal

vulnerability

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.

Affected configurations

NVD

Node

rarlabwinrarRange≤5.61

CPENameOperatorVersion
rarlab:winrarrarlab winrarle5.61

CPE	Name	Operator	Version
rarlab:winrar	rarlab winrar	le	5.61

CNA Affected

[
  {
    "product": "WinRAR",
    "vendor": "Check Point Software Technologies Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior and including 5.61"
      }
    ]
  }
]