CVE-2006-3845
HIGH 9.3EPSS 7.9%
Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.
- CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 7.89% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2006-07-25
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://hustlelabs.com/advisories/04072006_rarlabs.pdf
- http://secunia.com/advisories/21080
- http://www.securityfocus.com/bid/19043