CVE-2005-3263

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-20 · updated 2026-06-16

Description

Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name.

Affected products

WinRAR: 2.90, 3.0.0, 3.10, 3.10_beta3, 3.10_beta5, 3.11 (+5)

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0266.html
http://secunia.com/advisories/16973/
http://secunia.com/secunia_research/2005-53/advisory/
http://www.osvdb.org/19915
http://www.rarlabs.com/rarnew.htm
http://www.securityfocus.com/bid/15062
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0266.html
http://secunia.com/advisories/16973/
http://secunia.com/secunia_research/2005-53/advisory/
http://www.osvdb.org/19915
http://www.rarlabs.com/rarnew.htm
http://www.securityfocus.com/bid/15062

Get alerted when CVE-2005-3263 or the next vulnerability affects your stack