Vulnerability Details CVE-2005-4620
Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument. NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specify a command-line argument for this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.1%
CVSS Severity
CVSS v2 Score 4.6
Products affected by CVE-2005-4620
-
cpe:2.3:a:rarlab:winrar:2.90
-
cpe:2.3:a:rarlab:winrar:3.0.0
-
cpe:2.3:a:rarlab:winrar:3.10
-
cpe:2.3:a:rarlab:winrar:3.10_beta3
-
cpe:2.3:a:rarlab:winrar:3.10_beta5
-
cpe:2.3:a:rarlab:winrar:3.11
-
cpe:2.3:a:rarlab:winrar:3.20
-
cpe:2.3:a:rarlab:winrar:3.30
-
cpe:2.3:a:rarlab:winrar:3.40
-
cpe:2.3:a:rarlab:winrar:3.41
-
cpe:2.3:a:rarlab:winrar:3.42
-
cpe:2.3:a:rarlab:winrar:3.50