PT-2024-3293 · Winrar+6 · Winrar+6
Goodbyeselene
·
Published
2024-04-28
·
Updated
2025-09-03
·
CVE-2024-33899
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
WinRAR versions prior to 7.00
Description
The issue is related to errors in processing input data in the ANSI Escape Sequence Handler component of the WinRAR file archiver. Exploitation of this issue may allow a remote attacker to cause a denial of service or spoof the screen output. This can be achieved via ANSI escape sequences.
Recommendations
For versions prior to 7.00, update to version 7.00 or later to resolve the issue. As a temporary workaround, consider disabling the use of ANSI escape sequences in WinRAR until a patch is applied. Restrict access to the ANSI Escape Sequence Handler component to minimize the risk of exploitation. Avoid using WinRAR on Linux and UNIX platforms until the issue is resolved.
Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Red Os
Suse
Ubuntu
Winrar