CVE-2007-0855: RARLAB UnRAR

Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.

Affected products

• RARLAB UnRAR: version 3.60 only; version 3.61 only

Published 2007-02-08. Last modified 2026-06-16.