ID CVE-2008-7144
Summary Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.
References
Vulnerable Configurations
  • cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.30:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.41:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.42:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.50:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.51:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta1:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta1:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta2:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta2:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta3:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta3:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta4:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta4:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta5:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta5:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta6:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta6:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta7:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta7:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.60_beta8:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.60_beta8:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.61:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.61:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.62:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.62:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:-:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:-:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta1:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta1:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta2:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta2:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta3:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta3:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta4:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta4:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta5:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta5:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta6:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta6:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta7:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta7:*:*:*:*:*:*:*
  • cpe:2.3:a:rarlab:winrar:3.70_beta8:*:*:*:*:*:*:*
    cpe:2.3:a:rarlab:winrar:3.70_beta8:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 17-08-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
misc
osvdb 43439
secunia 29407
vupen ADV-2008-0916
xf winrar-archives-code-execution(41251)
Last major update 17-08-2017 - 01:29
Published 01-09-2009 - 16:30
Last modified 17-08-2017 - 01:29
Back to Top