Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-3262 — Use of Externally-Controlled Format String in Winrar

5 documents4 sources

Severity

7.5HIGHNVD

EPSS

9.6%

top 7.11%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Rarlab Winrar

Timeline

PublishedOct 20

Latest updateMay 1

Description

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDrarlab/winrar11 versions+10

Patches

Patch: secunia.com ↗Patch: secunia.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

GHSA

GHSA-mqg5-xjp9-584v: Format string vulnerability in RARLAB WinRAR 2↗2022-05-01

▶

CVEList

CVE-2005-3262: Format string vulnerability in RARLAB WinRAR 2↗2005-10-20

▶

💥Exploits & PoCs

Exploit-DB

Info-ZIP UnZip 5.x - File Name Buffer Overflow↗2005-12-19

▶

Exploit-DB

RARLAB WinRar 2.90/3.x - UUE/XXE Invalid Filename Error Message Format String↗2005-10-11

▶