Lucene search
Ubuntu.comUB:CVE-2024-36052HistoryMay 21, 2024 - 12:00 a.m.
CVE-2024-36052
2024-05-2100:00:00
ubuntu.com
ubuntu.com
6
windows
winrar
spoofing
ansi escape sequences
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.0%
RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen
output via ANSI escape sequences, a different issue than CVE-2024-33899.
Notes
| Author | Note |
|---|---|
| alexmurray | This CVE is specific to WinRAR on Windows - there is an associated CVE for WinRAR on Linux (aka unrar-nonfree in Ubuntu) in CVE-2024-33899 |
Related
cve
cve
CVE-2024-36052
2024-05-21 17:15:09
CVE-2024-33899
2024-04-29 00:15:07
nvd
nvd
CVE-2024-36052
2024-05-21 17:15:09
CVE-2024-33899
2024-04-29 00:15:07
cvelist
cvelist
CVE-2024-36052
1976-01-01 00:00:00
CVE-2024-33899
2024-04-28 00:00:00
nessus
nessus
WinRAR < 7.00 Multiple Vulnerabilities
2024-04-05 00:00:00
SUSE SLES12 Security Update : unrar (SUSE-SU-2024:1975-1)
2024-06-12 00:00:00
redos
redos
ROS-20240507-01
2024-05-07 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1975-1)
2024-06-12 00:00:00
ubuntucve
ubuntucve
CVE-2024-33899
2024-04-29 00:00:00
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.0%
Related for UB:CVE-2024-36052