PT-2021-4638 · Winrar · Winrar

Published 2021-10-20 · Updated 2021-10-20

Positive Technologies (AI Summary)

CVSS v2.0

1.8

Low

Base vector

AV:A/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WinRAR (affected versions not specified)

Description The issue is related to the file archiver WinRAR and involves the redirection of requests to a malicious domain when loading the dynamic library mshtml.dll. This could allow an attacker to implement an ARP-spoofing attack using a specially crafted malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-300

Related Identifiers

BDU:2021-05327

Affected Products

Winrar

References · 4

• https://bdu.fstec.ru/vul/2021-05327 · Security Note
• http://swarm.ptsecurity.com/winrars-vulnerable-trialware-when-free-software-isnt-free · Note
• https://cybersecurity-help.cz/vdb/SB2021102208 · Note
• https://anti-malware.ru/news/2021-10-21-114534/37267 · Note