Re: Keeping UniExtract up to date
Posted: Sat Apr 28, 2018 1:39 pm
TPFC Forums
https://www.portablefreeware.com/forums/
https://www.portablefreeware.com/forums/viewtopic.php?t=4719
Fortunately, Universal Extractor 2 does not have it.billon wrote: ↑Fri Feb 22, 2019 12:46 am Extracting a 19 Year Old Code Execution from WinRAR
TL:DR
There is critical vulnerability in UNACEV2.DLL which is used to extract ACE archives.
Roshal just removed it (and ACE support) in latest beta, don't know about Ghisler and FAR devs.
UNACEV2.DLL is also used in Universal Extractor, so be careful
Same version, same code, no?https://github.com/Bioruebe/UniExtract2/blob/master/helper_binaries_info.txt wrote: XAce Plus xace.exe 2.6 Marcel Lemke http://www.winace.com/
Yeah, it's likely. I had missed it. I filed a bug report now: https://github.com/Bioruebe/UniExtract2/issues/132billon wrote: ↑Fri Feb 22, 2019 4:17 amSame version, same code, no?https://github.com/Bioruebe/UniExtract2/blob/master/helper_binaries_info.txt wrote: XAce Plus xace.exe 2.6 Marcel Lemke http://www.winace.com/
Dirk Pahel's Simplyzip v1.1b78 (link 26-MAY-2014)billon wrote: ↑Fri Feb 22, 2019 12:46 am ...
Looks like that library is also presented in PeaZip and PeaExtractor.
Somewhere else?
Code: Select all
c:\>dir Progra~1\winrar\unace*
26/08/2005 00:50 77,312 UNACEV2.DLL
- Added support for IS 6.1.
- Fixed broken paths that originally were in UNC format.