Описание
Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.
Ссылки
- ExploitVendor Advisory
- PatchVendor Advisory
- ExploitVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.60_beta1:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.60_beta2:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.60_beta3:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.60_beta4:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.60_beta5:*:*:*:*:*:*:*
cpe:2.3:a:rarlab:winrar:3.60_beta6:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05579
Низкий
9.3 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.
EPSS
Процентиль: 90%
0.05579
Низкий
9.3 Critical
CVSS2
Дефекты
NVD-CWE-Other