WinRAR has announced that there is a critical vulnerability in all versions of WinRAR released in the last 19 years.
The vulnerability is found in the UNACEV2.DLL file. The bug lets attackers craft a malicious file that can add a malicious program to the startup list. This program can run on the computers next reboot.
I suggest that everyone either update to the latest beta version of winrar or simply delete the UNACEV2.DLL file from the WinRAR folder.
Depending on whether you have the 64 bit version or 32 bit version installed. The default installation location will be in either:
C:\Program Files\WinRAR
C:\Program Files (x86)\WinRAR
Locate the UNACEV2.DLL, highlight the file and SHIFT+DELETE to permanently delete the file.
If you would like to read more about this please click here.
