Buffer Overflow Vulnerability in RARLAB WinRAR Products

CVE-2005-3263

Summary

A stack-based buffer overflow vulnerability exists in the UNACEV2.DLL library of RARLAB's WinRAR versions 2.90 through 3.50. This issue enables remote attackers to execute arbitrary code on a victim's system by exploiting specially crafted ACE archives containing files with excessively long filenames. Victims who open these malicious archives using an affected version of WinRAR may inadvertently compromise their systems, leading to unauthorized access and potential data breaches.

References