Keeping UniExtract up to date

Discuss anything related to portable freeware here.
Message
Author
billon
Posts: 746
Joined: Sat Jun 23, 2012 4:28 pm

Re: Keeping UniExtract up to date

#196 Post by billon » Sat Apr 28, 2018 1:39 pm


billon
Posts: 746
Joined: Sat Jun 23, 2012 4:28 pm

Critical vulnerability in UNACEV2.DLL

#197 Post by billon » Fri Feb 22, 2019 12:46 am

Extracting a 19 Year Old Code Execution from WinRAR

TL';DR
There is critical vulnerability in UNACEV2.DLL which is used to extract ACE archives.
Roshal just removed it (and ACE support) in latest beta, don't know about Ghisler and FAR devs.

UNACEV2.DLL is also used in Universal Extractor, so be careful :!:

Looks like that library is also presented in PeaZip and PeaExtractor.
Somewhere else?

User avatar
SYSTEM
Posts: 1905
Joined: Sat Jul 31, 2010 1:19 am
Location: Helsinki, Finland

Re: Critical vulnerability in UNACEV2.DLL

#198 Post by SYSTEM » Fri Feb 22, 2019 1:53 am

billon wrote:
Fri Feb 22, 2019 12:46 am
Extracting a 19 Year Old Code Execution from WinRAR

TL:DR
There is critical vulnerability in UNACEV2.DLL which is used to extract ACE archives.
Roshal just removed it (and ACE support) in latest beta, don't know about Ghisler and FAR devs.

UNACEV2.DLL is also used in Universal Extractor, so be careful :!:
Fortunately, Universal Extractor 2 does not have it.

Thanks for the link. The article was an interesting read. :)
My YouTube channel | Release date of my 12th playlist: November 1, 2018

billon
Posts: 746
Joined: Sat Jun 23, 2012 4:28 pm

Re: Critical vulnerability in UNACEV2.DLL

#199 Post by billon » Fri Feb 22, 2019 4:17 am

SYSTEM wrote:
Fri Feb 22, 2019 1:53 am
Fortunately, Universal Extractor 2 does not have it.
Same version, same code, no?

billon
Posts: 746
Joined: Sat Jun 23, 2012 4:28 pm

Re: Keeping UniExtract up to date

#200 Post by billon » Fri Feb 22, 2019 4:36 am

Actually I don't know why I have that UNACEV2.DLL if there xace.exe
Maybe messed with different versions

And xace.exe writes to the registry HKCU\Software\e-merge
wtf

User avatar
SYSTEM
Posts: 1905
Joined: Sat Jul 31, 2010 1:19 am
Location: Helsinki, Finland

Re: Critical vulnerability in UNACEV2.DLL

#201 Post by SYSTEM » Fri Feb 22, 2019 5:05 am

billon wrote:
Fri Feb 22, 2019 4:17 am
SYSTEM wrote:
Fri Feb 22, 2019 1:53 am
Fortunately, Universal Extractor 2 does not have it.
Same version, same code, no?
Yeah, it's likely. I had missed it. I filed a bug report now: https://github.com/Bioruebe/UniExtract2/issues/132
My YouTube channel | Release date of my 12th playlist: November 1, 2018

User avatar
__philippe
Posts: 605
Joined: Wed Jun 26, 2013 2:09 am

Re: Critical vulnerability in UNACEV2.DLL

#202 Post by __philippe » Fri Feb 22, 2019 7:38 am

billon wrote:
Fri Feb 22, 2019 12:46 am
...
Looks like that library is also presented in PeaZip and PeaExtractor.
Somewhere else?
Dirk Pahel's Simplyzip v1.1b78 (link 26-MAY-2014)

Also included in Win7 standard distribution : :roll:

Code: Select all

c:\>dir Progra~1\winrar\unace*
26/08/2005  00:50         77,312  UNACEV2.DLL

billon
Posts: 746
Joined: Sat Jun 23, 2012 4:28 pm

Re: Keeping UniExtract up to date

#203 Post by billon » Fri May 17, 2019 3:06 am

innounp 0.49
  • Added support for IS 6.0.

billon
Posts: 746
Joined: Sat Jun 23, 2012 4:28 pm

Re: Keeping UniExtract up to date

#204 Post by billon » Wed Jan 22, 2020 10:23 pm


gae89
Posts: 12
Joined: Thu Apr 02, 2020 2:15 am

Re: Keeping UniExtract up to date

#205 Post by gae89 » Wed Apr 08, 2020 4:38 am

Image

A light zip extractor (about 500 KB).
Download here: http://windows-freeware.com/GaetanoExtractor_v1.rar

billon
Posts: 746
Joined: Sat Jun 23, 2012 4:28 pm

Re: Keeping UniExtract up to date

#206 Post by billon » Mon Jun 29, 2020 12:05 pm


Post Reply