Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2004-1254

WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, possibly causing an integer overflow that leads to a buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.052
EPSS Ranking 89.4%
CVSS Severity
CVSS v2 Score 10.0
Products affected by CVE-2004-1254
  • Rarlab » Winrar » Version: 3.0.0
    cpe:2.3:a:rarlab:winrar:3.0.0
  • Rarlab » Winrar » Version: 3.10
    cpe:2.3:a:rarlab:winrar:3.10
  • Rarlab » Winrar » Version: 3.10_beta3
    cpe:2.3:a:rarlab:winrar:3.10_beta3
  • Rarlab » Winrar » Version: 3.10_beta5
    cpe:2.3:a:rarlab:winrar:3.10_beta5
  • Rarlab » Winrar » Version: 3.11
    cpe:2.3:a:rarlab:winrar:3.11
  • Rarlab » Winrar » Version: 3.20
    cpe:2.3:a:rarlab:winrar:3.20
  • Rarlab » Winrar » Version: 3.40
    cpe:2.3:a:rarlab:winrar:3.40
  • Rarlab » Winrar » Version: 3.41
    cpe:2.3:a:rarlab:winrar:3.41


Contact Us

Shodan ® - All rights reserved