Using WinRAR? Be sure to patch against these code execution bugs


The legendary RAR program, sometimes known as Roshal’s Archiver after its original developer, has long enjoyed widespread use in the file-sharing and software distribution communities, thanks in large part to its inherent error-recovery and file-reconstruction capabilities. You were out of luck if one floppy vanished or wouldn’t read back properly, or if one section of a 12-part archive upload accidentally got erased from the server.

The days when large file transfers were sent either as compressed archives split across multiple floppy disks or uploaded to size-conscious online forums as a series of modestly sized chunks that were first compressed to save space and then expanded into an ASCII-only text-encoded form will be remembered by early internet users with little affection.

Read More…