CVE-2005-3262

2005-10-2004:00:00

mitre

www.cve.org

AI Score

7.7

Confidence

High

EPSS

0.085

Percentile

94.6%

JSON

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.