Vulnerability · NVD

CVE-2004-1495

N/A Published on 2004-12-31

The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive.

EPSS 1.35% above median percentile 68.8%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

WinRAR Windows winget:RARLab.WinRAR

Affected — Fixed in — Latest tracked 7.23.0 undetermined

Vulnerable CPE configurations (8)

Vendor	Product	Platform	Versions	CPE 2.3 URI
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:2.90:::::::*
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:3.0.0:::::::*
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:3.10:::::::*
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:3.10_beta3:::::::*
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:3.10_beta5:::::::*
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:3.11:::::::*
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:3.20:::::::*
rarlab	winrar All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:rarlab:winrar:3.40:::::::*