Read the docs
TI-2008-06832 Aliases CVE-2008-7144GHSA-jwh7-cj9w-f3p3

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and…

Priority MEDIUM 47Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.

Why it matters now

EPSS 0.02266 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 32

CPEVersionsRoleVendor
cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:*up to 3.70VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*2.90VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*3.10VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*3.10_beta3VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*3.10_beta5VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*3.11VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*3.20VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*3.30VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*3.40VulnerableRARLAB
  • cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:* Versions up to 3.70 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:* Versions 2.90 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:* Versions 3.10_beta3 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:* Versions 3.10_beta5 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:* Versions 3.20 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:* Versions 3.30 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:* Versions 3.40 Vulnerable ·RARLAB
Show 22 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*3.41VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*3.42VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*3.50VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:*3.51VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta1:*:*:*:*:*:*:*3.60_beta1VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta2:*:*:*:*:*:*:*3.60_beta2VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta3:*:*:*:*:*:*:*3.60_beta3VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta4:*:*:*:*:*:*:*3.60_beta4VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta5:*:*:*:*:*:*:*3.60_beta5VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta6:*:*:*:*:*:*:*3.60_beta6VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta7:*:*:*:*:*:*:*3.60_beta7VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.60_beta8:*:*:*:*:*:*:*3.60_beta8VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.61:*:*:*:*:*:*:*3.61VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.62:*:*:*:*:*:*:*3.62VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta1:*:*:*:*:*:*:*3.70_beta1VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta2:*:*:*:*:*:*:*3.70_beta2VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta3:*:*:*:*:*:*:*3.70_beta3VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta4:*:*:*:*:*:*:*3.70_beta4VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta5:*:*:*:*:*:*:*3.70_beta5VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta6:*:*:*:*:*:*:*3.70_beta6VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta7:*:*:*:*:*:*:*3.70_beta7VulnerableRARLAB
cpe:2.3:a:rarlab:winrar:3.70_beta8:*:*:*:*:*:*:*3.70_beta8VulnerableRARLAB
  • cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:* Versions 3.41 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:* Versions 3.42 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:* Versions 3.50 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:* Versions 3.51 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta1:*:*:*:*:*:*:* Versions 3.60_beta1 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta2:*:*:*:*:*:*:* Versions 3.60_beta2 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta3:*:*:*:*:*:*:* Versions 3.60_beta3 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta4:*:*:*:*:*:*:* Versions 3.60_beta4 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta5:*:*:*:*:*:*:* Versions 3.60_beta5 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta6:*:*:*:*:*:*:* Versions 3.60_beta6 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta7:*:*:*:*:*:*:* Versions 3.60_beta7 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.60_beta8:*:*:*:*:*:*:* Versions 3.60_beta8 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.61:*:*:*:*:*:*:* Versions 3.61 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.62:*:*:*:*:*:*:* Versions 3.62 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta1:*:*:*:*:*:*:* Versions 3.70_beta1 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta2:*:*:*:*:*:*:* Versions 3.70_beta2 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta3:*:*:*:*:*:*:* Versions 3.70_beta3 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta4:*:*:*:*:*:*:* Versions 3.70_beta4 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta5:*:*:*:*:*:*:* Versions 3.70_beta5 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta6:*:*:*:*:*:*:* Versions 3.70_beta6 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta7:*:*:*:*:*:*:* Versions 3.70_beta7 Vulnerable ·RARLAB
  • cpe:2.3:a:rarlab:winrar:3.70_beta8:*:*:*:*:*:*:* Versions 3.70_beta8 Vulnerable ·RARLAB

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-7144
  2. 2026-10-03 Alias added: GHSA-jwh7-cj9w-f3p3

References

Patch 1

Other 3

  • TI-2025-07400 Path traversal vulnerability in WinRAR KEVCVSS 4.0HIGH 8.4
  • TI-2025-05626 Path traversal in RARLAB WinRAR KEVCVSS 3.0HIGH 7.8
  • TI-2023-20115 RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts… KEVCVSS 3.1HIGH 7.8
  • TI-2018-14356 Path traversal in Check Point Software Technologies Ltd. WinRAR KEVCVSS 3.1HIGH 7.8
  • TI-2024-23905 RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via… CVSS 3.1HIGH 7.5
  • TI-2024-22371 RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the… CVSS 3.1HIGH 7.1
See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences