Vulnerabilities > CVE-2005-3262 - Unspecified vulnerability in Rarlab Winrar

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
rarlab
exploit available
NVD
Published: 2005-10-20
Updated: 2008-09-10

Summary

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.

Vulnerable Configurations

Part Description Count
Application
Rarlab
11

Exploit-Db

descriptionRARLAB WinRar 2.90/3.x UUE/XXE Invalid Filename Error Message Format String. CVE-2005-3262 . Dos exploit for linux platform
idEDB-ID:26342
last seen2016-02-03
modified2005-10-11
published2005-10-11
reporterTan Chew Keong
sourcehttps://www.exploit-db.com/download/26342/
titleRARLAB WinRar 2.90/3.x UUE/XXE Invalid Filename Error Message Format String

References