CVE Vulnerabilities

CVE-2005-4620

Published: Dec 31, 2005 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument. NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specify a command-line argument for this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability.

Affected Software

Name Vendor Start Version End Version
Winrar Rarlab 3.50 3.50
Winrar Rarlab 3.0.0 3.0.0
Winrar Rarlab 3.10 3.10
Winrar Rarlab 3.41 3.41
Winrar Rarlab 3.20 3.20
Winrar Rarlab 3.42 3.42
Winrar Rarlab 3.30 3.30
Winrar Rarlab 2.90 2.90
Winrar Rarlab 3.40 3.40
Winrar Rarlab 3.10_beta3 3.10_beta3
Winrar Rarlab 3.10_beta5 3.10_beta5
Winrar Rarlab 3.11 3.11

References