This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Detection & Prevention for CVE-2018-20250 (WinRAR)

We're looking for information on Sophos' ability to detect and prevent exploits of CVE-2018-20250 for WinRAR, which are actively being seen in the wild. Any feedback would be awesome!

This thread was automatically locked due to age.

Parents

0 Yashraj S over 6 years ago

Hi Clayton Dillard

I will be contacting our team and will get back to you when I hear from them. Also, do you use ACE archives in your environment? This vulnerability can be exploited when WinRAR uses "unacev2.dll" library to parse ACE archives. If you do not use ACE archives, then you should update to the latest (Beta) version of WinRAR as they have dropped support for ACE file formats.

Thanks,

Yashraj Singha
Manager | Global Community Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick Barwick over 6 years ago in reply to Yashraj S

Any update on this? We'd actually like to stop the winrar application from running, or is the service granular enough to only allow latest version to run?
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick Barwick over 6 years ago in reply to Patrick Barwick

The number of winrar archives that are taking advantage of this defect is rapidly increasing. Please provide some helpful info to prevent execution.

https://www.tomshardware.com/news/winrar-vulnerability-mcafee-research-cybersecurity-stats,38845.html
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Patrick Barwick over 6 years ago in reply to Patrick Barwick

The number of winrar archives that are taking advantage of this defect is rapidly increasing. Please provide some helpful info to prevent execution.

https://www.tomshardware.com/news/winrar-vulnerability-mcafee-research-cybersecurity-stats,38845.html
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

Detection & Prevention for CVE-2018-20250 (WinRAR)

Submitted a Tech Support Case lately from the Support Portal?