CVE-2005-3262
Published Oct 20, 2005
Last updated 16 years ago
Overview
- Description
- Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FFE81D1-EE81-415D-ACE0-F97AF38BE007"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16A1E0B7-020F-4110-9603-58CA8CEB7581"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3366C2D1-F30A-413B-94A2-7DBDACC083EE"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8585089C-A6B5-4BFE-BEA3-133B94F24F72"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1011521-AEF2-40EB-B671-66B20FF01CC5"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9843D850-DC4C-49D5-AAEB-EF75FB54F08C"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C9B3100-2223-4201-AE29-B4A4EAFF2595"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F95B556-A1B4-4AEF-8223-5ED44819515D"
},
{
"criteria": "cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C89BC32A-6D3B-4B83-BD49-856233EEF51C"
}
],
"operator": "OR"
}
]
}
]