Remote Code Execution Vulnerability in WinRAR by Rarlab
CVE-2004-1254
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2004-1254?
WinRAR versions 3.40 and earlier are susceptible to a vulnerability that allows remote attackers to execute arbitrary code. This issue arises when processing ZIP files containing files with excessively long filenames, potentially causing an integer overflow that may lead to a buffer overflow. Attackers can exploit this flaw to gain unauthorized access to systems, highlighting the importance of keeping software updated and implementing robust security measures.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.