Vulnerabilities > Rarlab > Winrar > 3.51

DATE CVE VULNERABILITY TITLE RISK
2009-09-01 CVE-2008-7144 Remote Security vulnerability in WinRar
Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.
network
low complexity
rarlab
critical
10.0
2006-07-25 CVE-2006-3845 Buffer Overflow vulnerability in RARLAB WinRAR LHA Filename Handling
Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.
network
rarlab
critical
9.3
2005-12-22 CVE-2005-4474 Buffer Overflow vulnerability in Rarlab Winrar 3.51
Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated using a Chinese filename, possibly due to buffer expansion when using the WideCharToMultiByte API.
network
high complexity
rarlab
5.1