CVE-2006-3845 in WinRar
Summary
Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
07/25/2006
Disclosure
07/25/2006
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2385 | RarLabs WinRar LHA Archive stack-based overflow | 121 | Proof-of-Concept | Official fix | CVE-2006-3845 |