CVE-2003-1445

MEDIUM 4.6CVE-2003-1445 · Published 31/12/2003 · updated 16/06/2026

In short

CVE-2003-1445 is a MEDIUM (CVSS 4.6) vulnerability affecting far manager (rarlab).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
far manager rarlab	`= 1.65= 1.70_beta_1= 1.70_beta_4`	No fix yet

Description

Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.

References

securityreason.com/securityalert/3281
securityfocus.com/archive/1/311334 · Exploit
securityfocus.com/bid/6822 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/11293

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free