[wlug] Re: WinRAR Flaw Lets Hackers Run Programs When You Open RAR Archives

On Sun, 20 Aug 2023 09:14:52 +1200, Peter Reutemann quoted:

'A critical vulnerability (CVE-2023-40477) has been patched in WinRAR, enabling remote attackers to execute arbitrary code by luring victims into opening a specially crafted RAR file.'

I don’t understand the point of RAR. I just did some tests with a few random RAR-compressed archives I had previously downloaded, recompressing their contents in good old ZIP as well as 7z. And there is maybe 2% difference in it at most. Simply not worth it.