CVE-2005-3262

Summary

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/15062
• http://secunia.com/advisories/16973/
• http://www.rarlabs.com/rarnew.htm
• http://secunia.com/secunia_research/2005-53/advisory/

References

• http://www.securityfocus.com/bid/15062
• http://secunia.com/advisories/16973/
• http://www.rarlabs.com/rarnew.htm
• http://secunia.com/secunia_research/2005-53/advisory/

• ←Previous
• Next→