RARLAB - WinRAR v7.23 Final for Windows

Winrar features

• Full support for RAR and ZIP archives
• Using an original, highly efficient data compression algorithm
• Availability of a graphic shell with support for drag & drop technology
• Ability to use the command line interface
• Manage archives of other formats (CAB, ARJ, LZH, TAR, GZ, TAR.GZ, BZ2, TAR.BZ2, UUE, JAR, ISO, 7Z, Z)
• Support continuous archiving method for better compression
• Support for multi-volume archives
• Create self-extracting (SFX) regular and multi-volume archives using standard or additional SFX modules
• Ability to restore physically damaged archives
• Possibility of creating and using volumes for restoration, allowing you to recreate missing parts of multi-volume archives.
• Supports Unicode encoding in file names
• Additional functions (encrypting data and file names in the archive, adding archival comments, maintaining an error protocol)
• Use of third-party design of the program interface in the form of separate topics

Version 7.23

1. Heap overflow vulnerability is fixed in RAR5 recovery volume
   data reconstruction code. It affects WinRAR, RAR and UnRAR.
   UnRAR.dll library doesn't include recovery volume processing
   so it is not affected.
   We are thankful to Arjun Basnet from Securin Labs for letting us know
   about this security issue.
2. Symbolic link pointing outside of destination folder could be created
   even without -ola switch, when extracting a specially crafted
   RAR archive by WinRAR, RAR, UnRAR or UnRAR.dll library.
   Further check in extraction code prevention files to such folder
   even in case of multiple extraction commands, excluding the possibility
   of path traversal attack for WinRAR, RAR or UnRAR based extraction.
   It limits the potential threat to a case where another tool uses this
   symbolic link to store files.
   We are thankful to scofaild23-bnomran for letting us know about this
   security issue.
3. 7zxa.dll 7z extension library is updated to version 26.02 to include
   bug and vulnerability fixes by the library developer.
4. Switch - river prints RAR version even if -idc is specific
   in the command line, configuration file or RARINISWITCHES environment
   variable. Previous -idc blocked -iver action.
   Also a new line character is added to -iver output.
   History of changes

• The license file is picked up during program installation.
  If this does not happen, copy the rarreg.key license file to the folder with the installed program.
• Installers with other languages can be downloaded from the official website. The medicine is suitable.