CVE-2023-38831

Summary

CVE-2023-38831 is a vulnerability affecting RARLAB WinRAR versions prior to 6.23. An attacker can exploit this issue by creating a specially crafted ZIP archive containing a benign file with the same name as a folder. When a user attempts to view the benign file, the contents of the folder, which may include executable code, are inadvertently processed. This vulnerability was exploited in the wild between April and October 2023, allowing attackers to execute arbitrary code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.