CVE-2005-3263

Description

Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name.

Risk Information

Base Score
7.3
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
5.421

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in WinRAR (X64) 3.50Windows
Multiple vulnerabilities affected in WinRAR 3.50Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-338463WinRAR (X64) (7.01)
PATCH-338462WinRAR (7.01)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234