| Package | Affected versions | Patched versions |
|---|---|---|
| winrar | = 2.90= 3.0.0= 3.10= 3.10_beta3= 3.10_beta5= 3.11= 3.20= 3.40= 3.41= 3.42= 3.50 |
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free