![\"winrar](\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/04\/winrar_danger_700.jpg\")
<\/p>\n<\/p>\n
WinRAR is one of those programs that almost everybody has. Nobody can remember where the file compression program<\/a> came from or how they got it, a lot of people don\u2019t even know it does, it is just there on their PC and always has been. Unfortunately, there is bad news for all of us as security experts\u00a0Check Point<\/a>\u00a0have just found a bug that has been sitting in WinRAR for over 19 years.<\/strong><\/p>\n The researchers at Check Point have discovered something rather disturbing. Buried in one of WinRAR\u2019s code libraries is a flaw that could allow hackers to execute a malicious code whenever a \u201cbooby-trapped\u201d file is opened with the program. What\u2019s worse about this whole thing is that the code library in question, UNACEV2.dll, hasn\u2019t been used since 2005.<\/p>\n How to secure your Wi-Fi network Part<\/p>\r\n Make me safe<\/a>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n According to Check Point<\/a>, the bug meant they were able to insert a file into the Windows\u2019 startup folder. This file would then start automatically when Windows was booted and wouldn\u2019t need any sort of administrator\u2019s privileges to do so. Theoretically, this file could be used to grant any third-party full control over the victim\u2019s computer.<\/strong><\/p>\n The real shocker is just how many people could have been exposed to the vulnerability. Check Point puts the number at somewhere around 500 million.<\/strong>\u00a0Yes, half a billion people could have had their computer taken over using this newly discovered WinRAR vulnerability. That means you\u2019ve probably been at risk for the last twenty years.<\/p>\n The 7 security tips you really need to know<\/p>\r\n Read now<\/a>\r\n <\/div>\r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n If you think the fact that this bug is so old means you\u2019re in no rush to deal with it, think again. The fact that the vulnerability is now public means there is much more of a chance that hackers will try and exploit it. This doesn\u2019t mean that Check Point has acted irresponsibly by releasing the details, on the contrary, Check Point notified WinRAR about this vulnerability some time ago, and WinRAR has already taken action to fix it.<\/p>\n The WinRAR website says<\/a>, \u201cNadav Grossman from Check Point Software Technologies informed us about a security vulnerability in UNACEV2.DLL library. Aforementioned vulnerability makes possible to create files in arbitrary folders inside or outside of destination folder when unpacking ACE archives.\u201d WinRAR has since dropped the UNACEV2.dll code library and no longer supports the ACE archive format, which opened the door to nefarious action. Furthermore, WinRAR has released a patch for the problem, WinRAR version 5.70 beta 1<\/a>, which you can download here<\/a>.<\/p>\n We highly recommend that if you have WinRAR installed on your PC, you update it immediately. Stay safe, people.<\/p>\nThis WinRAR bug has put half a billion users at risk<\/h2>\n
\r\n \r\n \r\n \r\n ![](\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/WiFi-Security-2-1024x576.jpg\")
\r\n <\/div>\r\n \r\n ![\"WinRAR](\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/04\/fig2_uciru0.jpg\")
\r\n \r\n \r\n \r\n ![](\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/06\/seguridad-diaria-1024x576.jpg\")
\r\n <\/div>\r\n \r\n ![\"Demo](\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/04\/WinRAR_bug_tqp0mw.jpg\")