Buffer Overflow Vulnerability in WinRAR by RARLAB

CVE-2005-4474

Summary

A buffer overflow vulnerability exists in the 'Add to archive' command of WinRAR 3.51, which can be exploited through user-assisted actions. Attackers can potentially induce a denial of service (DoS) or execute arbitrary code by convincing users to add files with specific filenames that include non-default code page characters, as illustrated through examples with Chinese filenames. The issue arises when the WideCharToMultiByte API improperly manages buffer expansion. While there is uncertainty regarding the potential for code execution, the user assistance required makes this vulnerability noteworthy in the context of software security.

References