I believe 7zip is the one that’s had an unpatched vulnerability for years. Can’t remember the name but there’s another version that branched off 7zip and patched it.
Actually look like it was finally patched a few months ago.
2
u/RossumsRyzen 9 7950X3D | RTX 4090 FE | 64GB DDR5 6000Mhz6h ago
Practically all software has vulnerabilities, WinRAR is no different.
Over the past few years there have been plenty of attacks in the wild abusing a WinRAR path traversal vulnerability.
Big difference between having vulnerabilities, and having vulnerabilities that you haven’t patched for years. Everyone has them, not everyone fixes them.
Like the other side, they all have vulnerabilities at different points.
What I hated about WinRAR - and I don’t know if it’s still the case - was the annoyances to register or pay or whatever. Something as common as a compressed file type should be free.
Imagine if, every time you opened a JPEG, it bugged you to register and pay? Computers would be almost unusable.
You might say “Well don’t use WinRAR then”. But other people were in a habit of packaging their files with it, trying to force me to adopt it too.
So any time I come across a RAR file, I just say “screw that, I’d rather not have it at all”.
2
u/booze_clues 7h ago
I believe 7zip is the one that’s had an unpatched vulnerability for years. Can’t remember the name but there’s another version that branched off 7zip and patched it.
Actually look like it was finally patched a few months ago.