Exploitation Summary
EIP tracks 3 public exploits for CVE-2006-3912. PoCs published by Jerome Athias, muts, posidron.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in WinRAR's self-extracting archive functionality. It crafts a malicious SFX archive with a specially formatted comment file to trigger a buffer overflow, executing shellcode for a bind shell on port 4444.
Description
Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.
Exploits (3)
This exploit targets a stack overflow vulnerability in WinRAR's self-extracting archive functionality. It crafts a malicious SFX archive with a specially formatted comment file to trigger a buffer overflow, executing shellcode for a bind shell on port 4444.
This exploit targets a stack overflow vulnerability in WinRAR 3.60 beta 4 by crafting a malicious SFX archive with a long 'Path' field containing NOP sleds, shellcode, and a JMP ESP address. Execution triggers arbitrary code execution via a bind shell on port 4444.
This exploit demonstrates a stack-based buffer overflow in WinRAR 3.60 beta 4 via the 'Path' command in SFX archives. It crafts a malicious comment.txt file to trigger the vulnerability when the SFX archive is executed, leading to arbitrary code execution.