< False WinRAR Security Alerts
	
		
		
		
			
				  	
				 	
					
				 	
					
					
					
					
			
			
			
	
		08.10.2015 15:56 Age: 10 yrs
		    
		
	
		WinRAR 5.30 Beta 5 released
Release date: 08.10.2015
- 
        Information about the critical vulnerability in WinRAR self-extracting
        archives recently published in news is incorrect. Unfortunately
        mass media failed to recognize that what was described as WinRAR
        vulnerability is Windows OLE vulnerability patched in November 2014:
        
 
 Even if unpatched, this Windows OLE vulnerability does not introduce new risk factors for WinRAR SFX archives.
 
 Please read https://www.rarlab.com/vuln_sfx_html2.htm for more details.
 
 No patches for WinRAR are needed.
 
 
- 
        "Import/Export" commands:
        
 
 - 
                WinRAR performs the additional validation of Settings.reg contents
                for "Import settings from file" command to prevent importing Registry
                keys unrelated to WinRAR settings;
                
 
 
- WinRAR specifies the full path to regedit.exe tool to prevent running copies of "regedit" from other folders.
 
 
 
- 
                WinRAR performs the additional validation of Settings.reg contents
                for "Import settings from file" command to prevent importing Registry
                keys unrelated to WinRAR settings;
                
- 
        Bugs fixed:
        
 
 - 
                If "file" and "file.exe" were present in the same folder
                and user double clicked on "file", WinRAR could start "file.exe"
                instead;
                
 
 
- 
                "Generate report" command could create a report in wrong folder,
                not that with selected files;
                
 
 
- 
                RAR could crash when unpacking .rar archives with corrupt file
                headers. Fixed now.
                
 
 
 
- 
                If "file" and "file.exe" were present in the same folder
                and user double clicked on "file", WinRAR could start "file.exe"
                instead;
                
About win.rar GmbH:
win.rar GmbH has been the official distributor of WinRAR and RARLAB products since February 2002 and handles all support, marketing and sales related to WinRAR & rarlab.com. win.rar GmbH is registered in Germany and is represented worldwide by local partners in more than 70 countries on six continents. win.rar's declared objective is to provide first-class quality support and to optimize its software to meet customer's requirements in accordance with their valued feedback. For more information about WinRAR and win.rar GmbH please visit our website: www.win-rar.com
The beta download links are being expired after the final release!
