Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2019-25477

RAR Password Recovery 1.80 Denial of Service Buffer Overflow

Description

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration Code field to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Top-Password RAR Password Recovery

  • 1.80affected

References