GCVE - cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*

part: a version: 3.30 update: *

Vendor	Rarlab (`8c25d7e7-d80a-5deb-91c5-65b39ac8ced7`)
Product	Winrar (`0f8f275e-0e05-5261-a96c-4c3ef1433229`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-7144`	vulnerable	2026-06-08 04:51:05.693707	Details available Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats. Published: 2009-09-01T16:00:00.000Z Updated: 2024-08-07T11:56:14.177Z Open on db.gcve.eu Reference links http://secunia.com/advisories/29407 http://osvdb.org/43439 http://www.vupen.com/english/advisories/2008/0916/references http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html https://exchange.xforce.ibmcloud.com/vulnerabilities/41251	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3845`	vulnerable	2026-06-08 04:49:10.307257	Details available Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive. Published: 2006-07-25T23:00:00.000Z Updated: 2024-08-07T18:48:39.247Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21080 http://www.securityfocus.com/bid/19043 https://exchange.xforce.ibmcloud.com/vulnerabilities/27815 http://www.rarlabs.com/rarnew.htm http://www.vupen.com/english/advisories/2006/2867	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4620`	vulnerable	2026-06-08 04:48:44.455860	Details available Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument. NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specify a command-line argument for this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability. Published: 2006-01-06T11:00:00.000Z Updated: 2024-08-07T23:53:27.892Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/420679/100/0/threaded http://www.rarlab.com/rarnew.htm http://www.securityfocus.com/data/vulnerabilities/exploits/0xletzdance.c http://www.securityfocus.com/bid/15123	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.