Version 6.02 beta 11. ZIP SFX module refuses to process SFX commands stored in archivecomment if such comment is resided after beginning of Authenticodedigital signature. It is done to prevent possible attacks withinclusion of ZIP archive into the signature body.We already prohibited extracting contents of such malformed archivesin WinRAR 6.01.We are thankful to FireEye Mandiant team for reporting this issue.2. WinRAR uses https instead of http in the web notifier window,home page and themes links. It also implements additional checkswithin the web notifier. This is done to prevent a malicious web pagefrom executing existing files on a user's computer. Such attacksare only possible if the intruder has managed to spoof or otherwisecontrol user's DNS records. Other factors are also involvedin limiting its practical application, including a security alertprompt asking for a user's confirmation before opening a malicious page.We would like to express our gratitude to Igor Sak-Sakovskiyfor bringing this issue to our attention.3. Where appropriate, SFX archive displays the additional linewith detailed error information provided by operating system.For example, previously such archive would display "Cannot create file"message alone. Now this message is followed by a detailed reasonlike access denied or file being used by another process.In the past this extended error information was available in WinRAR,but not in SFX archives.4. Switch -idn hides archived names also in 'v' and 'l' commands.It can be useful if only the archive type or total informationis needed.5. If -ibck -ri<priority> switches are used together, WinRAR processsets the priority specified in -ri switch. Previous versions ignored-ri and set the priority to low in the presence of -ibck switch.6. When using "File/Change drive" command, WinRAR saves the last folderof previous drive and restores it if that drive is selected againlater.7. Name of unpacking file is now included into WinRAR incorrect passwordwarning for RAR5 archives. It can be helpful when unpackinga non-solid archive containing files encrypted with different passwords.8. Bugs fixed:a) "Convert archives" command issued erroneous "The specified passwordis incorrect" message after succesfully converting RAR archivewith encrypted file names if new password was set and archivewas opened in WinRAR shell;b) if command progress window was resized up and then quickly resizeddown to original dimensions, window contents could be positionedincorrectly. 正文
WinRAR 6.02 Beta 1 发布
流行好用的压缩工具，支持鼠标拖放及外壳扩展，完美支持 ZIP 档案，内置程序可以解开 CAB、ARJ、LZH、TAR、GZ、UUE、BZ2、JAR、ISO 等多种类型的压缩文件。重要提示：因ACE模块重大漏洞，WinRAR从5.70 beta 1始不再支持ACE格式压缩档。下载地址：https://www.rarlab.com/download.htmVersion 6.02 beta 11. ZIP SFX module refuses to process SFX commands stored in archivecomment if such comment is resided after beginning of Authenticodedigital signature. It is done to prevent possible attacks withinclusion of ZIP archive into the signature body.We already prohibited extracting contents of such malformed archivesin WinRAR 6.01.We are thankful to FireEye Mandiant team for reporting this issue.2. WinRAR uses https instead of http in the web notifier window,home page and themes links. It also implements additional checkswithin the web notifier. This is done to prevent a malicious web pagefrom executing existing files on a user's computer. Such attacksare only possible if the intruder has managed to spoof or otherwisecontrol user's DNS records. Other factors are also involvedin limiting its practical application, including a security alertprompt asking for a user's confirmation before opening a malicious page.We would like to express our gratitude to Igor Sak-Sakovskiyfor bringing this issue to our attention.3. Where appropriate, SFX archive displays the additional linewith detailed error information provided by operating system.For example, previously such archive would display "Cannot create file"message alone. Now this message is followed by a detailed reasonlike access denied or file being used by another process.In the past this extended error information was available in WinRAR,but not in SFX archives.4. Switch -idn hides archived names also in 'v' and 'l' commands.It can be useful if only the archive type or total informationis needed.5. If -ibck -ri<priority> switches are used together, WinRAR processsets the priority specified in -ri switch. Previous versions ignored-ri and set the priority to low in the presence of -ibck switch.6. When using "File/Change drive" command, WinRAR saves the last folderof previous drive and restores it if that drive is selected againlater.7. Name of unpacking file is now included into WinRAR incorrect passwordwarning for RAR5 archives. It can be helpful when unpackinga non-solid archive containing files encrypted with different passwords.8. Bugs fixed:a) "Convert archives" command issued erroneous "The specified passwordis incorrect" message after succesfully converting RAR archivewith encrypted file names if new password was set and archivewas opened in WinRAR shell;b) if command progress window was resized up and then quickly resizeddown to original dimensions, window contents could be positionedincorrectly.
Version 6.02 beta 11. ZIP SFX module refuses to process SFX commands stored in archivecomment if such comment is resided after beginning of Authenticodedigital signature. It is done to prevent possible attacks withinclusion of ZIP archive into the signature body.We already prohibited extracting contents of such malformed archivesin WinRAR 6.01.We are thankful to FireEye Mandiant team for reporting this issue.2. WinRAR uses https instead of http in the web notifier window,home page and themes links. It also implements additional checkswithin the web notifier. This is done to prevent a malicious web pagefrom executing existing files on a user's computer. Such attacksare only possible if the intruder has managed to spoof or otherwisecontrol user's DNS records. Other factors are also involvedin limiting its practical application, including a security alertprompt asking for a user's confirmation before opening a malicious page.We would like to express our gratitude to Igor Sak-Sakovskiyfor bringing this issue to our attention.3. Where appropriate, SFX archive displays the additional linewith detailed error information provided by operating system.For example, previously such archive would display "Cannot create file"message alone. Now this message is followed by a detailed reasonlike access denied or file being used by another process.In the past this extended error information was available in WinRAR,but not in SFX archives.4. Switch -idn hides archived names also in 'v' and 'l' commands.It can be useful if only the archive type or total informationis needed.5. If -ibck -ri<priority> switches are used together, WinRAR processsets the priority specified in -ri switch. Previous versions ignored-ri and set the priority to low in the presence of -ibck switch.6. When using "File/Change drive" command, WinRAR saves the last folderof previous drive and restores it if that drive is selected againlater.7. Name of unpacking file is now included into WinRAR incorrect passwordwarning for RAR5 archives. It can be helpful when unpackinga non-solid archive containing files encrypted with different passwords.8. Bugs fixed:a) "Convert archives" command issued erroneous "The specified passwordis incorrect" message after succesfully converting RAR archivewith encrypted file names if new password was set and archivewas opened in WinRAR shell;b) if command progress window was resized up and then quickly resizeddown to original dimensions, window contents could be positionedincorrectly. 若无特殊标注皆为互联网收集，仅供用于学习和交流，请勿用于商业用途。如有侵权、不妥之处，请联系站长并出示版权证明以便删除。敬请谅解！
还没有评论，来说两句吧...