CVE-2023-40477

Name of the Vulnerable Software and Affected Versions RARLAB WinRAR versions prior to 6.23

Description An issue exists in the processing of recovery volumes due to improper validation of an array index. This lack of proper validation of user-supplied data can lead to memory access past the end of an allocated buffer. A remote attacker can exploit this by luring a user to visit a malicious page or open a malicious RAR archive, allowing the execution of arbitrary code within the context of the current process.

Recommendations Update RARLAB WinRAR to version 6.23 or later.