Vulnerabilities > Rarlab > Winrar > 3.51
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-09-01 | CVE-2008-7144 | Remote Security vulnerability in WinRar Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats. | 10.0 |
2006-07-25 | CVE-2006-3845 | Buffer Overflow vulnerability in RARLAB WinRAR LHA Filename Handling Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive. | 9.3 |
2005-12-22 | CVE-2005-4474 | Buffer Overflow vulnerability in Rarlab Winrar 3.51 Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated using a Chinese filename, possibly due to buffer expansion when using the WideCharToMultiByte API. | 5.1 |