CVE-2024-55504

MEDIUM

RAR Extractor - Unarchiver Free and Pro <6.4.0 - Code Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-55504. PoCs published by SyFi.

AI-analyzed exploit summary This PoC demonstrates a local code execution vulnerability in RAR Extractor - Unarchiver Free and Pro v6.4.0 on macOS by leveraging DYLD_INSERT_LIBRARIES to load a malicious dynamic library (exploit_combined.dylib). The exploit requires local access and manipulates the application's execution flow to achieve arbitrary code execution.

Description

An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploit_combined.dylib component on MacOS.

Exploits (1)

nomisec WORKING POC

by SyFi · poc

https://github.com/SyFi/CVE-2024-55504

View Code ZIP pw:eip

This PoC demonstrates a local code execution vulnerability in RAR Extractor - Unarchiver Free and Pro v6.4.0 on macOS by leveraging DYLD_INSERT_LIBRARIES to load a malicious dynamic library (exploit_combined.dylib). The exploit requires local access and manipulates the application's execution flow to achieve arbitrary code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: RAR Extractor - Unarchiver Free and Pro v6.4.0

No auth needed

Prerequisites: Local access to the target macOS system · Presence of the vulnerable RAR Extractor application · Malicious dynamic library (exploit_combined.dylib)

MITRE ATT&CK

T1574.006 - Dynamic Linker Hijacking

devstral-2 · analyzed Feb 16, 2026 Full analysis →