PT-2022-6822 · Winrar+4 · Winrar+4

Goodbyeselene · Published 2022-05-15 · Updated 2026-01-18 · CVE-2023-40477

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WinRAR versions prior to 6.23

Description This vulnerability allows remote attackers to execute arbitrary code on affected installations of WinRAR. User interaction is required to exploit this vulnerability, where the target must visit a malicious page or open a malicious file. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.

Recommendations Update to WinRAR version 6.23 or later to resolve the issue. As a temporary workaround, consider avoiding the use of recovery volumes in WinRAR until a patch is applied. Additionally, be cautious when opening files from untrusted sources and avoid clicking on suspicious links to minimize the risk of exploitation.

Exploit

Fix

RCE

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

ALT-PU-2022-1866

ALT-PU-2022-1959

ALT-PU-2022-2424

ALT-PU-2025-5948

BDU:2023-04819

CVE-2023-40477

DLA-3542-1

DLA-3543-1

DLA-3653-1

MGASA-2023-0258

OPENSUSE-SU-2023_4415-1

OPENSUSE-SU-2024:13394-1

SUSE-SU-2023:4297-1

SUSE-SU-2023:4415-1

SUSE-SU-2023_4297-1

SUSE-SU-2023_4415-1

USN-6569-1

USN-7349-1

USN-7350-1

ZDI-23-1152

Affected Products

Astra Linux

Linuxmint

Suse

Ubuntu

Winrar

References · 132

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/fileformat/unrar_cve_2022_30333.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbra_unrar_cve_2022_30333.rb · Exploit
• 🔥 https://github.com/wildptr-io/Winrar-CVE-2023-40477-POC · Exploit
• 🔥 https://github.com/rbowes-r7/unrar-cve-2022-30333-poc · Exploit
• 🔥 https://github.com/TheL1ghtVn/CVE-2022-30333-PoC · Exploit
• 🔥 https://github.com/aslitsecurity/Zimbra-CVE-2022-30333 · Exploit
• https://osv.dev/vulnerability/CVE-2023-40477 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-1152 · Security Note
• https://ubuntu.com/security/notices/USN-6569-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40477 · Security Note
• https://ubuntu.com/security/CVE-2024-33899 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/697902 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40477 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6569-1 · Vendor Advisory