CVE Vulnerabilities

CVE-2006-3845

Published: Jul 25, 2006 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.

Affected Software

Name Vendor Start Version End Version
Winrar Rarlab 3.0.0 (including) 3.0.0 (including)
Winrar Rarlab 3.10 (including) 3.10 (including)
Winrar Rarlab 3.10_beta3 (including) 3.10_beta3 (including)
Winrar Rarlab 3.10_beta5 (including) 3.10_beta5 (including)
Winrar Rarlab 3.11 (including) 3.11 (including)
Winrar Rarlab 3.20 (including) 3.20 (including)
Winrar Rarlab 3.30 (including) 3.30 (including)
Winrar Rarlab 3.40 (including) 3.40 (including)
Winrar Rarlab 3.41 (including) 3.41 (including)
Winrar Rarlab 3.42 (including) 3.42 (including)
Winrar Rarlab 3.50 (including) 3.50 (including)
Winrar Rarlab 3.51 (including) 3.51 (including)
Winrar Rarlab 3.60_beta1 (including) 3.60_beta1 (including)
Winrar Rarlab 3.60_beta2 (including) 3.60_beta2 (including)
Winrar Rarlab 3.60_beta3 (including) 3.60_beta3 (including)
Winrar Rarlab 3.60_beta4 (including) 3.60_beta4 (including)
Winrar Rarlab 3.60_beta5 (including) 3.60_beta5 (including)
Winrar Rarlab 3.60_beta6 (including) 3.60_beta6 (including)

References