1. CVE-Search
  2. CVE-2004-1495
ID CVE-2004-1495
Summary The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive.
References
Vulnerable Configurations
  • cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*
CVSS
Base: 2.6 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:H/Au:N/C:N/I:N/A:P
refmap via4
bid 11581
bugtraq 20041102 Medium Risk Vulnerability in WinRAR
confirm http://www.rarlabs.com/rarnew.htm
secunia 13070
xf winrar-repair-archive(17937)
Last major update 11-07-2017 - 01:31
Published 31-12-2004 - 05:00
Last modified 11-07-2017 - 01:31
Back to Top