VulnSocial

CVE-2006-3845General(rarlab / winrar)

LOWCVSS 9.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.

rarlab CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Other references

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • winrar

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
rarlab
Products
winrar

18 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-01-30: 1Technical Details · 2026-01-30: 101-30
Signal classification1 categories
General
1100.0%
Full discourse1 post
  • たあぬほ）ふじ、 Kestrel@KestrelYTReal
    General

    @ramdileo @NotNordgaren Brother, you're vulnerable not just to the one above but also CVE-2023-38831 File Spoofing CVE-2018-20250 Ace PT CVE-2006-3845 Buffer Overflow All well-known exploits. Old does not equal exploit-free. almost always the opposite, see any legacy Windows version as a example

    Post summary

    The tweet lists several historical CVEs affecting legacy Windows and warns they remain exploitable, without providing new technical specifics, PoC, or patch details.

    10000140
    27 followersView on X
CPE platform detail18 entries

18 of 18 entries

PartVendorProductVersionTarget SWTarget HW
Apprarlabwinrar3.0.0--
Apprarlabwinrar3.10--
Apprarlabwinrar3.10_beta3--
Apprarlabwinrar3.10_beta5--
Apprarlabwinrar3.11--
Apprarlabwinrar3.20--
Apprarlabwinrar3.30--
Apprarlabwinrar3.40--
Apprarlabwinrar3.41--
Apprarlabwinrar3.42--
Apprarlabwinrar3.50--
Apprarlabwinrar3.51--
Apprarlabwinrar3.60_beta1--
Apprarlabwinrar3.60_beta2--
Apprarlabwinrar3.60_beta3--
Apprarlabwinrar3.60_beta4--
Apprarlabwinrar3.60_beta5--
Apprarlabwinrar3.60_beta6--

Explore more

Back to dashboardrarlab CVEswinrar vulnerabilities