Library Pack Header

Perform an update of WinRAR to the version 5.70 English to patch the vulnerability (CVE-2018-20250) discovered with ACE packages handling.

Vulnerability Management

In WinRAR versions prior to and including 5.61, a vulnerability when managing ACE files has been discovered. When the filename is manipulated with some patterns, the destination folder is ignored and malicious files could be extracted anywhere without any notice.\nIn order to run a silent execution, campaign can be skipped by providing an empty GUID as input CampaignId. In such case, WinRAR will be closed and updated automatically.

The script should be executed every 4 weeks.

ID of the campaign to notify user that WinRAR must be closed. Provide an empty ID to avoid executing this campaign

Campaign ID

ID of the campaign to notify the user about the finish of the WinRAR update process. Provide an empty ID to avoid executing this campaign

Operation completed campaign ID

Maximum random delay set to avoid overloading server hosting virtual machines. Provide number of seconds less than 600

Maximum delay in seconds

Update WinRAR

WinRAR version retrieved after performing the update process

Vulnerability Management

Description

Versions

Content

Required Products

Platforms

Compatibility