meta content='PcpJKOmoday5SZ2ES5Jk' name='bulletprofit'/> Ayyobpatel.bloggr.com: WinRAR patches 19-year-old security vulnerability that put millions at risk

Followers

WinRAR patches 19-year-old security vulnerability that put millions at risk

WinRAR has patched a 19-year-old security vulnerability that allowed attackers to extract malicious software to anywhere on your hard drive. The vulnerability was discovered by researchers at Check Point Software Technologies, who realised that WinRAR’s support for the effectively defunct ACE archive format meant that it was still relying on an insecure and dated DLL file from 2006.

The researchers have compiled a lengthy blog post explaining how they discovered the bug, but a short video tells you everything you need to know about how it works. Simply by renaming an ACE file to give it a RAR extension you can get WinRAR to extract a malicious program to a computer’s startup folder, meaning it will run automatically the next time the...

Continue reading…



from The Verge - All Posts https://ift.tt/2GCNoNg

No comments:

Post a Comment

Please let me know