Unscored CVE-2015-5663 EUVD-2015-5613GHSA-vm3c-vj26-xwxp

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name sim…

Published Dec 30, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user.

References

79666 vdb-entry
JVN#64636058 third-party-advisory
1034881 vdb-entry
JVNDB-2015-000199 third-party-advisory