CVE-2005-3262

Опубликовано: 20 окт. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.

Ссылки

http://secunia.com/advisories/16973/
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-53/advisory/
Patch
Vendor Advisory
http://www.rarlabs.com/rarnew.htm
http://www.securityfocus.com/bid/15062
Patch
http://secunia.com/advisories/16973/
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-53/advisory/
Patch
Vendor Advisory
http://www.rarlabs.com/rarnew.htm
http://www.securityfocus.com/bid/15062
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09615

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mqg5-xjp9-584v

github

почти 4 года назад