CVE-2005-3263

Опубликовано: 20 окт. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0266.html
http://secunia.com/advisories/16973/
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-53/advisory/
Patch
Vendor Advisory
http://www.osvdb.org/19915
http://www.rarlabs.com/rarnew.htm
http://www.securityfocus.com/bid/15062
Patch
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0266.html
http://secunia.com/advisories/16973/
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-53/advisory/
Patch
Vendor Advisory
http://www.osvdb.org/19915
http://www.rarlabs.com/rarnew.htm
http://www.securityfocus.com/bid/15062
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*

cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05421

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-m653-3pmm-jx6r

github

почти 4 года назад