3 ms·
Yes, an example: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ https://blog.google/threat-analysis-group/
by bgwalter 2y ago
Yes, an example:
https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ https://blog.google/threat-analysis-group/government-backed-...
I also do not understand how Anonymous would sift through 10TB to confirm the validity of the claims.
- deleted 2y ago[deleted]
- Rygian 2y ago> Instead of bailing out, ShellExecute proceeds to call “shell32!ApplyDefaultExts” which iterates through all files in a directory, finding and executing the first file with an extension matching any of the hardcoded ones: “.pif, .com, .exe, .bat, .lnk, .cmd”. So the vulnerability is not in WinRAR, but rather in the ShellExecute windows code that desperately tries to find something else to run when asked to execute a file that does not exist. As my security officer says at $dayJob, "having a security hole there for thirty years does not make it somehow less of a security hole".