CVE-2005-3263: RARLAB WinRAR

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name.

Affected products

• RARLAB WinRAR: version 2.90 only; version 3.0.0 only; version 3.10 only; version 3.10_beta3 only; version 3.10_beta5 only; version 3.11 only; …

Published 2005-10-20. Last modified 2026-06-16.