{"id":42231,"date":"2019-03-18T00:00:00","date_gmt":"2019-03-17T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov"},"modified":"2020-02-18T13:45:03","modified_gmt":"2020-02-18T10:45:03","slug":"uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","title":{"rendered":"Zranitelnost star\u00e1 19 let v WinRAR u\u017e je vyu\u017e\u00edv\u00e1na v\u00edce ne\u017e sto exploity","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tak star\u00fd a obl\u00edben\u00fd n\u00e1stroj, jako je WinRAR, jak bylo zn\u00e1mo minul\u00fd m\u011bs\u00edc, byl po posledn\u00edch 19 let zraniteln\u00fd v\u016f\u010di chyb\u011b, kterou mohou snadno vyu\u017e\u00edt hacke\u0159i a \u0161i\u0159itel\u00e9 malwaru. Na\u0161t\u011bst\u00ed byla tato chyba opravena v ned\u00e1vn\u00e9m vyd\u00e1n\u00ed 5.70. Mnoho u\u017eivatel\u016f v\u0161ak program dlouho neaktualizovalo a d\u011bl\u00e1 to obecn\u011b z\u0159\u00eddka, tak\u017ee nyn\u00ed nov\u00e1 vlna malwaru aktivn\u011b vyu\u017e\u00edv\u00e1 tuto slabinu.<\/p>\n

\"Zranitelnost<\/p>\n

Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci z Check Point, kte\u0159\u00ed objevili zranitelnost, vysv\u011btlili, \u017ee chyba v archiva\u010dn\u00edm programu je vyu\u017e\u00edv\u00e1na k \u0161\u00ed\u0159en\u00ed \u0161kodliv\u00fdch archiv\u016f s p\u0159\u00edponou RAR, kter\u00e9 po otev\u0159en\u00ed mohou automaticky extrahovat \u0161kodliv\u00fd k\u00f3d. Tyto programy se instaluj\u00ed do slo\u017eky automatick\u00e9ho spu\u0161t\u011bn\u00ed PC, a pak funguj\u00ed kdykoliv je po\u010d\u00edta\u010d zapnut\u00fd, a to v\u0161e se d\u011bje bez v\u011bdom\u00ed u\u017eivatele.<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Jakmile byla chyba odhalena, hackersk\u00e9 skupiny za\u010daly skute\u010dn\u011b vyu\u017e\u00edvat jej\u00ed z\u00e1jmy, a r\u016fzn\u00e9 zem\u011b se staly c\u00edlem kyber\u0161pion\u00e1\u017en\u00edch kampan\u00ed, kter\u00e9 se sna\u017eily shrom\u00e1\u017edit zpravodajsk\u00e9 informace. Spole\u010dnost McAfee, kter\u00e1 se zab\u00fdv\u00e1 bezpe\u010dnost\u00ed softwaru, poznamenala, \u017ee ji\u017e bylo objeveno v\u00edce ne\u017e 100 jedine\u010dn\u00fdch exploit\u016f vyu\u017e\u00edvaj\u00edc\u00edch chybu WinRAR \u2013 v\u011bt\u0161ina z nich je zam\u011b\u0159ena na USA.<\/p>\n

<\/center><\/p>\n

Distribu\u010dn\u00edci malware jsou dob\u0159e informov\u00e1ni o popularit\u011b WinRAR mezi t\u011bmi, kdo preferuj\u00ed ileg\u00e1ln\u00ed stahov\u00e1n\u00ed r\u016fzn\u00fdch multimedi\u00e1ln\u00edch soubor\u016f. McAfee zmi\u0148uje, \u017ee jeden z nejpopul\u00e1rn\u011bj\u0161\u00edch exploit\u016f c\u00edl\u00ed na ty, kdo hledaj\u00ed na internetu pir\u00e1tsk\u00e9 kopie posledn\u00edho alba Ariany Grande \u2013 Thank U, Next.<\/p>\n

<\/p>\n
\n

Vzor exploitace WinRAR (#CVE-2018-20250) (united nations .rar) se zd\u00e1 b\u00fdt zam\u011b\u0159en na Bl\u00edzk\u00fd v\u00fdchod. Obsahuje n\u00e1vnadov\u00e9 dokumenty t\u00fdkaj\u00edc\u00ed se lidsk\u00fdch pr\u00e1v OSN a #UN v arab\u0161tin\u011b, nakonec stahuje a spou\u0161t\u00ed #Revenge RAT.https:\/\/t.co\/WJ4oJ1UxAz pic.twitter.com\/fgHYSD4Mk5<\/p>\n

\u2013 360 Threat Intelligence Center (@360TIC) 12. b\u0159ezna 2019<\/p><\/blockquote>\n

<\/center><\/p>\n

Samoz\u0159ejm\u011b, utilita WinRAR ji\u017e dnes nen\u00ed tak popul\u00e1rn\u00ed, jako byla p\u0159ed mnoha lety, ale od t\u00e9 doby, co se po\u010det jej\u00edch u\u017eivatel\u016f za t\u00e9m\u011b\u0159 20 let dostal na 500 milion\u016f, je nemo\u017en\u00e9 \u0159\u00edct, kolik syst\u00e9m\u016f st\u00e1le z\u016fst\u00e1v\u00e1 zraniteln\u00fdch v\u016f\u010di tomuto \u00fatoku. Nav\u00edc, a\u010dkoliv verze 5.70 byla vyd\u00e1na na konci ledna, mus\u00ed se ru\u010dn\u011b st\u00e1hnout a nainstalovat z ofici\u00e1ln\u00edch webov\u00fdch str\u00e1nek, co\u017e znamen\u00e1, \u017ee v\u011bt\u0161ina u\u017eivatel\u016f o tomto d\u016fle\u017eit\u00e9m aktualizaci nev\u00ed.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center><\/p>\n

Zdroj: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 5.70. \u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u043e \u0440\u0435\u0434\u043a\u043e, \u0442\u0430\u043a \u0447\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":42232,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-42231","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost 19 let star\u00e9 WinRAR ji\u017e vyu\u017e\u00edv\u00e1 v\u00edce ne\u017e sto exploit\u016f | ProHoster","description":"Tak star\u00e1 a popul\u00e1rn\u00ed utilita, jako je WinRAR, jak bylo zn\u00e1mo minul\u00fd m\u011bs\u00edc, byla po posledn\u00edch 19 let zraniteln\u00e1 v\u016f\u010di chyb\u011b, kterou mohou hacke\u0159i a \u0161\u00ed\u0159i\u010di malwaru snadno vyu\u017e\u00edt.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 19-\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 WinRAR \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0441\u043e\u0442\u043d\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-03-17T21:00:00+00:00","article:modified_time":"2020-02-18T10:45:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42231","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 07:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:04:28","updated":"2026-01-22 07:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/42231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=42231"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/42231\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/42232"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=42231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=42231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=42231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}