CVE-2006-3845: RARLAB WinRAR

High severity, CVSS 9.3. EPSS: 7.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive.

Affected products

• RARLAB WinRAR: version 3.0.0 only; version 3.10 only; version 3.10_beta3 only; version 3.10_beta5 only; version 3.11 only; version 3.20 only; …

Published 2006-07-25. Last modified 2026-06-16.