Shulou(Shulou.com)11/24 Report--

CTOnews.com, August 19, Zero Day Initiative (ZDI) website issued a security announcement today, saying that its security research expert goodbyeselene found a high-risk vulnerability in WinRAR software, tracking number CVE-2023-40477, which has been fixed.

Goodbyeselene reported this vulnerability to RARLAB on June 8, 2023, and then officially released an update of version 6.23 on August 2, which has been fixed.

According to the security announcement released today, the vulnerability has a CVSS score of 7.8 (with a total score of 10, the higher the score, the greater the destructive power). Hackers can use this vulnerability to create RAR files. Once the victim decompresses the file, the system will be infected and the hacker can execute arbitrary code remotely.

CTOnews.com recommends that users using WinRAR upgrade as soon as possible to avoid being affected by this problem. Download address: https://www.win-rar.com/download.html

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.