VulnerabilityAnalyzed

CVE-2019-25677

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory.

MEDIUM 6.9EPSS 0.43%

Does this matter?

Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.

Description

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.

CVSS 4.0: 6.9 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.43% probability · 36th percentile
CISA KEV: Not listed
Weakness: CWE-379
Affected: rarlab/winrar
Source: disclosure@vulncheck.com

References

https://win-rar.com/predownload.html?spV=true&subD=true&f=wrar561tr.exeProduct
https://www.exploit-db.com/exploits/46432Exploit, VDB Entry
https://www.vulncheck.com/advisories/winrar-denial-of-service-via-malformed-language-fileThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.