CVEvulnerability
CVE-2004-1495
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P
Description
The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive.
Affected configurations
• rarlab winrar 2.90
• rarlab winrar 3.0.0
• rarlab winrar 3.10
• rarlab winrar 3.10 beta3
• rarlab winrar 3.10 beta5
• rarlab winrar 3.11
• rarlab winrar 3.20
• rarlab winrar 3.40
References
- http://marc.info/?l=bugtraq&m=109941351432699&w=2 marc.info
- http://secunia.com/advisories/13070 Patch
- http://www.rarlabs.com/rarnew.htm www.rarlabs.com
- http://www.securityfocus.com/bid/11581 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17937 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109941351432699&w=2 marc.info
- http://secunia.com/advisories/13070 Patch
- http://www.rarlabs.com/rarnew.htm www.rarlabs.com
- http://www.securityfocus.com/bid/11581 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17937 exchange.xforce.ibmcloud.com