2 ms·
I seem to remember reading about how the rar format supports executing (arbitrary?) code when you unrar a file (presumably to support custom decompression algos
by Osmium 14y ago
I seem to remember reading about how the rar format supports executing (arbitrary?) code when you unrar a file (presumably to support custom decompression algos?) but I can't for the life of me find a reference for it now. Anyone have any idea what this is and if that's a factor too?
- qikon 14y agoTavis Ormandy (a widely respected security researcher) made a "minimal RarVM toolchain", so you can even try it out it yourself: https://github.com/taviso/rarvmtools https://github.com/taviso/rarvmtools