Vulnerability in Rarlab Winrar

CVE-2004-1254

WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, possibly causing an integer overflow that leads to a buffer overflow.

EPSS: 0.104 (95.2th percentile) — read the EPSS interpretation.

Affected products

  • Rarlab Winrar — versions 3.0.0, 3.10, 3.10_beta3
  • N/a — versions n/a

References