5 ms·

WinRAR flaw lets hackers run programs when you open RAR archives

57 points by donutshop 3y ago

bung 3y ago
Thanks for the heads-up.
- DANmode 3y ago
  7Zip, I believe, had a similar flaw "recently".
  - naikrovek 3y ago
    > 7Zip, I believe, had a similar flaw "recently". why did you put quotes around that word?
    - sovok_x 3y ago
      [dead]
    - DANmode 3y ago
      Couldn't recall just how long it'd been.
sovok_x 3y ago
Can someone explain why WinRar installers of the same exact versions and languages but downloaded from their different sites www.rarlab.com vs www.win-rar.com have different sizes/hashes while being signed by the same signer?
- icf80 3y ago
  good question 3,595,296 winrar-x64-623-rarlab.exe 3,586,840 winrar-x64-623-win-rar.exe sha-256 20739e8fc050187af013e2499718895e4c980699ccaf046b2f96b12497e61959 winrar-x64-623-win-rar.exe 3d019e60c0def88892ad89023d2e15133fc940fef140faeeaa414ad38f8ef3bf winrar-x64-623-rarlab.exe
tb_technical 3y ago
Reminder that 7z can extract .rar files, and is open source!