CVE:CVE-2008-7144
CNNVD:CNNVD-200909-013
WinRAR是软件开发者Alexander Roshal所研发的一款文件压缩管理器，它支持RAR与ZIP压缩文件，并且能解压缩CAB、ARJ和LZH等文件。
RARLAB WinRAR 3.71之前版本中存在多个未明漏洞。它们有未知影响和与特制的(1)ACE,(2)ARJ,(3)BZ2,(4)CAB,(5)GZ,(6)LHA,(7)RAR,(8)TAR或(9)ZIP文件相关的攻击向量。
solution:Upgrade rarlab winrar to a higher version than 3.70,2.90,3.0.0,3.10,3.10_beta3,3.10_beta5,3.11,3.20,3.30,3.40,3.41,3.42,3.50,3.51,3.60_beta1,3.60_beta2,3.60_beta3,3.60_beta4,3.60_beta5,3.60_beta6,3.60_beta7,3.60_beta8,3.61,3.62,3.70_beta1,3.70_beta2,3.70_beta3,3.70_beta4,3.70_beta5,3.70_beta6,3.70_beta7,3.70_beta8,and avoid the version (,3.70],2.90,3.0.0,3.10,3.10_beta3,3.10_beta5,3.11,3.20,3.30,3.40,3.41,3.42,3.50,3.51,3.60_beta1,3.60_beta2,3.60_beta3,3.60_beta4,3.60_beta5,3.60_beta6,3.60_beta7,3.60_beta8,3.61,3.62,3.70_beta1,3.70_beta2,3.70_beta3,3.70_beta4,3.70_beta5,3.70_beta6,3.70_beta7,3.70_beta8