critical10.0Public exploit code
CVE-2004-1254
WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, possibly c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WinRAR 3.4.1 - Corrupt '.ZIP' File2004-12-16 · local · windows · Verified
Impact
WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, possibly causing an integer overflow that leads to a buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rarlab | Winrar | Versions 3.0.0, 3.10, 3.10_beta3, 3.10_beta5, 3.11, 3.20 |