CVE-2008-7144

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-01 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.

Affected products

WinRAR: through 3.70; 2.90, 3.0.0, 3.10, 3.10_beta3, 3.10_beta5, 3.11 (+25)

References

http://osvdb.org/43439
http://secunia.com/advisories/29407
http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
http://www.vupen.com/english/advisories/2008/0916/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41251
http://osvdb.org/43439
http://secunia.com/advisories/29407
http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
http://www.vupen.com/english/advisories/2008/0916/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41251

Get alerted when CVE-2008-7144 or the next vulnerability affects your stack