CVE-2005-3262

Published: Oct 20, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.

Affected (11)

Products: Rarlab: Winrar

Rarlab

1 product

Winrar

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Rarlab Winrar	Version 2.90
Rarlab Winrar	Version 3.0.0
Rarlab Winrar	Version 3.10
Rarlab Winrar	Version 3.10_beta3
Rarlab Winrar	Version 3.10_beta5
Rarlab Winrar	Version 3.11
Rarlab Winrar	Version 3.20
Rarlab Winrar	Version 3.40
Rarlab Winrar	Version 3.41
Rarlab Winrar	Version 3.42
Rarlab Winrar	Version 3.50