Information Disclosure Vulnerability in WinRAR by RARLAB

CVE-2022-43650

What is CVE-2022-43650?

This vulnerability in WinRAR allows remote attackers to disclose sensitive information by exploiting a flaw in ZIP file parsing. User interaction is necessary, as the target must open a malicious ZIP file or visit a malicious webpage. Attackers can leverage crafted data within ZIP files, potentially leading to a read past the end of an allocated buffer. This flaw opens opportunities for attackers to combine it with other vulnerabilities to execute arbitrary code within the context of the affected process.

References