Description
Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Jerome Athias · pythonlocalwindows
https://www.exploit-db.com/exploits/1992
exploitdb
WORKING POC
VERIFIED
by muts · pythonlocalwindows
https://www.exploit-db.com/exploits/1985
exploitdb
WORKING POC
VERIFIED
by posidron · pythondoswindows
https://www.exploit-db.com/exploits/1984
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/27031
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/1992
Various Sources x_refsource_confirm
http://www.rarlabs.com/rarnew.htm
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/1984
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/1985
Scores
EPSS
0.0091
EPSS Percentile
76.0%
Details
CWE
CWE-119
Status
published
Products (1)
rarlab/winrar
3.60_beta8
Published
Jul 28, 2006
Tracked Since
Feb 18, 2026