WinRAR zero-day exploited since April to hack trading accounts

rhabarba@feddit.de to Technology@beehaw.org – 104 points –
bleepingcomputer.com
22

You are viewing a single comment

Is security not a merit?

Honestly, this is like the first time I heard WinRAR has this big security vulnerability. But I am still planning to stay on WinRAR given its easy to use UI and unlimited free trial.

It is. Coincidentally, security was one of the reasons to uninstall 7-Zip.

There's barely any CVEs on that page. It's likely a security researcher did some fuzzing of the executable and found a few issues at once.

Have you looked at how many vulnerabilities there's been in things like Windows, MacOS, Chrome, etc?

I have. The point is that there is no software without vulnerabilities.

The point is that there is no software without vulnerabilities.

Definitely true, but that conflicts with this:

Coincidentally, security was one of the reasons to uninstall 7-Zip.

If you uninstalled software because of security, you wouldn't have any software left :)

Also true. I was probably too impatient when I bought a WinRAR license over night. But now I have it and I use it. :-)

I'm sure they're still celebrating someone purchasing a license :)