If you don’t pay for WinRAR, at least update it, a significant security vulnerability is present

WinRAR file compression software is affected by a security vulnerability, and it is urgent to fix it pay to update.

First launched in 1995, WinRAR file compression software is one of those essentials for any self-respecting Internet user. The program is renowned for being able to compress/decompress .rar formats, but also .Zip, 7z, .cab and other .UUE formats. WinRAR is also famous for never being paid by its users, despite a trial period initially limited to 40 days and a reminder each time it is launched.

WinRAR, a critical vulnerability fixed in August

Actively used by more than 500 million users worldwide, WinRAR is software that is not spared from security concerns, and which must be regularly updated. Last August, the developers posted a patch online, aimed at eradicating a particularly dangerous security flaw.

Indeed, the vulnerability in question, numbered CVE-2023-38831, can allow malicious users to infect targeted devices with malware. This is particularly the case of a group of Russian hackers (Fancy Bear) which uses a compressed file exploiting this WinRAR flaw.

Update your WinRAR!

However, despite the release of a patch 3 months ago, this vulnerability continues to be widely exploited. There is a simple reason for this: the fact that users do not take care to update their WinRAR software.

Indeed, unlike the majority of software, WinRAR does not have an automatic update system. Also, it is up to the user to update the software, by downloading the latest version. For information, it is version 6.23 which includes the security patch in question (which obviously applies to later versions).

Also, it is more than recommended to update WinRAR as quickly as possible if you are used to the software. Remember, however, that Windows 11 and Windows 10 both have a RAR file decompression system, which allows you to do without the application.

Source : Gizmodo