high7.5Public exploit code
CVE-2005-3262
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RARLAB WinRar 2.90/3.x - UUE/XXE Invalid Filename Error Message Format String2005-10-11 · dos · linux · Verified
Impact
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rarlab | Winrar | Versions 2.90, 3.0.0, 3.10, 3.10_beta3, 3.10_beta5, 3.11 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/16973/
- http://secunia.com/secunia_research/2005-53/advisory/
- http://www.rarlabs.com/rarnew.htm
- http://www.securityfocus.com/bid/15062
- http://secunia.com/advisories/16973/
- http://secunia.com/secunia_research/2005-53/advisory/
- http://www.rarlabs.com/rarnew.htm
- http://www.securityfocus.com/bid/15062