CVE-2014-125119 describes a filename spoofing vulnerability in WinRAR when processing specially crafted ZIP archives. This flaw allows an attacker to display a benign filename while extracting and executing a malicious file due to inconsistencies between the Central Directory and Local File Header entries. With a CVSS score of 8.4 (HIGH), this vulnerability has a low attack complexity and can lead to remote code execution, impacting the confidentiality, integrity, and availability of affected systems. While not on the KEV catalog, a Metasploit module exists for exploitation, and it has garnered significant community discussion, indicating potential attacker interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.80, < 3.91CPE match | cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:* | ||
>= 4.11, < 5.00CPE match | cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.