CVE-2005-3232

The CVE-2005-3232 description identifies a vulnerability in TheHacker (unspecified versions) where a specially crafted RAR archive with malformed central/local headers can bypass virus detection when opening a malicious executable. The issue is remotely exploitable and affects how certain archive...

CVE-2005-3227

Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3224

The CVE-2005-3224 entry concerns AntiVir Antivirus (unspecified versions) and a multiple interpretation error in its handling of RAR archives. The underlying issue allows remote attackers to bypass virus detection by supplying a malicious executable inside a specially crafted RAR file with malfor...

CVE-2005-3211

CVE-2005-3211 affects BitDefender Antivirus and involves a multiple interpretation error in unspecified versions. A remote attacker can bypass virus detection by delivering a malicious executable in a specially crafted RAR file with malformed central and local headers. The crafted archive can be ...

CVE-2005-3211

Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip,...

CVE-2005-3218

Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3225

Multiple interpretation error in unspecified versions of 1 eTrust-Iris and 2 eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as...

CVE-2005-3233

Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3222

Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3213

CVE-2005-3213 concerns multiple interpretation errors in unspecified versions of F-Prot Antivirus that allow remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers. The crafted archive can be opened by tools l...

CVE-2005-3210

CVE-2005-3210 involves a vulnerability in unspecified versions of Kaspersky Antivirus where remote attackers can bypass virus detection by delivering a malicious executable packed in a specially crafted RAR file with malformed central and local headers. The issue allows the payload to be opened b...

CVE-2005-3219

Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

CVE-2005-3213

Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...

[Full-disclosure] Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 11/10/2005 - WinRAR Format String and Buffer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

Multiple WinRAR archiver vulnerabilities

UUEncoded files format string bug, ACE archives buffer overflow...

RARLAB WinRar 2.903.x - UUEXXE Invalid Filename Error Message Format String

RARLAB WinRar 2.903.x - UUEXXE Invalid Filename Error Message Format String source: https://www.securityfocus.com/bid/15062/info WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an...

RARLAB WinRar 2.90/3.x - UUE/XXE Invalid Filename Error Message Format String

source: https://www.securityfocus.com/bid/15062/info WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an attacker to execute arbitrary code on a vulnerable computer. WinRAR 3.50 and prio...

CVE-2005-0331

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... triple dot in the filename of the ZIP file...

CVE-2004-1495

The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service application crash via a corrupt ZIP archive...

CVE-2004-1495

CVE-2004-1495 concerns WinRAR 3.40 where the Repair Archive command can be abused to trigger a denial of service (application crash) by processing a corrupt ZIP archive. The connected records confirm the affected software and the input type (corrupt ZIP) but do not provide formal details on root ...