Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
rarlab vulnerabilities and exploits
(subscribe to this query)
465
VMScore
CVE-2003-1445
Stack-based buffer overflow in Far Manager 1.70beta1 and previous versions allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.
Rarlab Far Manager 1.65
Rarlab Far Manager 1.70 Beta 1
Rarlab Far Manager 1.70 Beta 4
1 EDB exploit
454
VMScore
CVE-2005-4474
Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted malicious users to cause a denial of service (crash) and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-A...
Rarlab Winrar 3.51
445
VMScore
CVE-2017-14120
unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.
Rarlab Unrar 0.0.1
Debian Debian Linux 9.0
445
VMScore
CVE-2017-12938
UnRAR prior to 5.5.7 allows remote malicious users to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
Rarlab Unrar
384
VMScore
CVE-2017-14121
The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.
Rarlab Unrar 0.0.1
Debian Debian Linux 9.0
383
VMScore
CVE-2018-20251
In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates files and folders as written in the filename field even when WinRAR validator noticed the traversal att...
Rarlab Winrar
1 Github repository
383
VMScore
CVE-2014-9983
Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote malicious users to write to arbitrary files via a crafted archive.
Rarlab Rar 5.20
Rarlab Rar 5.21
Rarlab Rar 5.30
Rarlab Rar 5.31
Rarlab Rar 4.11
Rarlab Rar 4.20
Rarlab Rar 5.50
Rarlab Rar 4.01
Rarlab Rar 5.01
Rarlab Rar 5.11
Rarlab Rar 5.40
Rarlab Rar 5.00
Rarlab Rar 4.00
Rarlab Rar 4.10
Rarlab Rar 5.10
383
VMScore
CVE-2007-3726
Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote malicious users to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed nu...
Rarlab Unrar 3.70 Beta 3
329
VMScore
CVE-2015-5663
The file-execution functionality in WinRAR prior to 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user.
Rarlab Winrar
231
VMScore
CVE-2005-0331
Directory traversal vulnerability in WinRAR 3.42 and previous versions, when the user clicks on the ZIP file to extract it, allows remote malicious users to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.
Rarlab Winrar 3.0.0
Rarlab Winrar 3.41
Rarlab Winrar 3.42
Rarlab Winrar 3.20
Rarlab Winrar 3.40
Rarlab Winrar 3.10 Beta5
Rarlab Winrar 3.11
Rarlab Winrar 3.10
Rarlab Winrar 3.10 Beta3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
remote code execution
CVE-2024-34909
CVE-2024-3317
SSTI
CVE-2024-3400
CVE-2024-30051
wireless
CVE-2024-4622
CVE-2024-4908
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »