CVE-2006-3845

Published: Jul 25, 2006Modified: Apr 16, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.

Affected (18)

Products: Rarlab: Winrar

Rarlab

1 product

Winrar

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Rarlab Winrar	Version 3.0.0
Rarlab Winrar	Version 3.10
Rarlab Winrar	Version 3.10_beta3
Rarlab Winrar	Version 3.10_beta5
Rarlab Winrar	Version 3.11
Rarlab Winrar	Version 3.20
Rarlab Winrar	Version 3.30
Rarlab Winrar	Version 3.40
Rarlab Winrar	Version 3.41
Rarlab Winrar	Version 3.42
Rarlab Winrar	Version 3.50
Rarlab Winrar	Version 3.51
Rarlab Winrar	Version 3.60_beta1
Rarlab Winrar	Version 3.60_beta2
Rarlab Winrar	Version 3.60_beta3
Rarlab Winrar	Version 3.60_beta4
Rarlab Winrar	Version 3.60_beta5
Rarlab Winrar	Version 3.60_beta6