CVE-2018-20253

Description

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• cve@checkpoint.com — Exploit, Third Party Advisory
• cve@checkpoint.com — Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory