Neurohazard
Our democracy have been h4ck3d.

CVE-2018-20250 Winrar Code Execution 基本资料与复现

wpadmin~February 28, 2019 /InfoSec

CVE-2018-20250 Winrar Code Execution 基本资料与复现

应用场景

类似 Office 恶意 RTF 文档, 恶意 Excel 的利用场景,主要用于邮件钓鱼。
注意除了 Winrar 以外 7zip 和 好压 等第三方压缩软件也受影响。 (受影响 DLL, UNACEV2.dll

相关资料

成功获取 WinRAR 19 年历史代码执行漏洞
https://www.anquanke.com/post/id/171403

Checkpoint: Extracting a 19 Year Old Code Execution from WinRAR
https://research.checkpoint.com/extracting-code-execution-from-winrar/

(利用场景分析)
警惕!WinRAR漏洞利用升级:社工、加密、无文件后门
https://www.freebuf.com/column/196839.html

WinRAR代码执行复现与利用
https://kali-team.cn/
https://www.bilibili.com/video/av44889268

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.