CVE-2008-7144: RARLAB WinRAR

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.

Affected products

• RARLAB WinRAR: up to and including 3.70; version 2.90 only; version 3.0.0 only; version 3.10 only; version 3.10_beta3 only; version 3.10_beta5 only; …

Published 2009-09-01. Last modified 2026-06-16.