CVE-2025-31334

Published Apr 3, 2025

Last updated 2 days ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-31334 is a vulnerability affecting WinRAR versions prior to 7.11. It involves a bypass of the "Mark of the Web" (MotW) security warning. This function typically alerts users when opening files from untrusted sources, such as the internet. The vulnerability stems from how WinRAR handles symbolic links. An attacker can create a malicious .rar archive containing a specially crafted symbolic link that points to an executable file. When a user extracts and opens this symbolic link, the executable file runs without displaying the usual MotW warning, potentially leading to arbitrary code execution.

Description: Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.
Source: vultures@jpcert.or.jp
NVD status: Received

Risk scores

CVSS 3.0

Type: Secondary
Base score: 6.8
Impact score: 5.9
Exploitability score: 0.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Severity: MEDIUM

Weaknesses

vultures@jpcert.or.jp: CWE-356

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 23

Overview

AI description

Risk scores

CVSS 3.0

Weaknesses

Social media

References