Does WinRAR's vulnerability affect DOpus?

Help & Support
1

According to the details disclosed by the security company Check Point researchers, serious security vulnerabilities have been discovered in WinRAR's UNACEV2.dll codebase, which has not been updated since 2005. WinRAR A tech-savvy attacker can execute "any malicious code" after opening a "booby-trapped" file.

This ancient vulnerability affects all WinRAR releases released in the past 19 years, with the UNACEV2.DLL library responsible for ACE format compressed files.

It seems that the decompression software that supports ACE format compressed files has been affected.

2

Opus does not handle ACE archives and does not use any components of WinRAR or UnRAR.dll for anything other than RAR archives.

3

That's great, DOpus is perfect, goodbye WinRAR.

Thanks.

4

WinRAR fixed the issue a month ago by no longer using the DLL, by the way. As long as you're on WinRAR 5.70 beta 1 or later, it's a non-issue.

5

I know that WinRAR fixes this vulnerability, but it is still in beta, and I can't stand WinRAR ads, so I can only say goodbye to it.

6

Just rename UNACEV2.dll, I haven't opened a ace file in at least 10 years.

7

Wow, do you have a hunch or already know that? Can you avoid the vulnerability by renaming UNACEV2.dll?

8

It was mentioned on reddit, makes sense since its casued by extracting ace files.