In a recent post on X (formerly Twitter), Web3 cybersecurity firm SlowMist warns Windows users about a recently discovered vulnerability in WinRAR, a popular file archiving utility developed for Microsoft’s operating systems. Although the vulnerability was originally discovered by Group- IB researcher Andrey Polovinkin on June 8, 2023, and fixed in an August 2 WinRAR 6.23 update, SlowMist emphasizes that &#34;&#39;WinRAR Vulnerability Detection Tool&#39; may be a malicious phishing program.&#34;&#34;The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process,&#34; Zero Day Initiative, an international software vulnerability initiative, <a href="https://www.zerodayinitiative.com/advisories/ZDI-23-1152/" rel="noopener noreferrer nofollow">described</a> the issue, which is tracked as CVE-2023-40477.Read also: <a href="https://coinpaper.com/1990/hackers-steal-over-11-5-million-from-web3-protocols-since-august-10" rel="noopener noreferrer nofollow">Hackers Steal over $11.5 Million from Web3 Protocols since August 10</a>To exploit the vulnerability, a malicious actor needs user interaction, which can be done via a phishing website or a compromised archive file. Meanwhile, SlowMist released its weekly security <a href="https://twitter.com/SlowMist_Team/status/1693751408623808773" rel="noopener noreferrer nofollow">report</a> yesterday. Although the company identified ten major security incidents between August 14 and 20, it stressed that there could have been more. Total losses from the security breaches amounted to nearly $20 million.Read also: <a href="https://coinpaper.com/1932/total-losses-from-security-incidents-since-august-4-exceed-7-million" rel="noopener noreferrer nofollow">Total Losses from Security Incidents Since August 4 Exceed $7 Million</a>Some of the exploits reported by SlowMist included the $2.2 million hack of Zynami Protocol on August 14, the loss of nearly $868,000 to the RocketSwap hack, and the embezzlement of more than $4.6 million by the SwirLend team across the Base network. Other Web3 projects affected this week included the BNB Chain-based Thales wallet and Harbor Protocol, while Exactly Protocol experienced one of the largest exploits of the week, resulting in losses of over $12 million.<a href="https://coinpaper.com/2001/critical-vulnerability-in-win-rar-can-give-attackers-control-over-your-pc?utm_source&#61;referral&amp;utm_medium&#61;publish0x&amp;utm_campaign&#61;publish0x" rel="noopener noreferrer nofollow">Read the full article on Coinpaper.</a>

Critical Vulnerability in WinRAR Can Give Attackers Control over Your PC

Coinpaper.com

Other articles published on Aug 22, 2023

Dawn Song

Bank of America Can Optimize XRP with Ripple’s Liquidity Hub, Expert Says

Bulls Favoring HRB Stock Price; Surged Over 12% in a Week

Bitcoin Anjlok dalam Sepekan, Aroma Bearish Akan Berlanjut?

Best Cryptos to Buy under $1

Bitcoin Cash Price Prediction: Pullback Turns Reversal In BCH?

Join our free newsletter for daily crypto updates!