Vulnerability Report

CVE-2006-3912

Title: Rarlab Winrar Memory Corruption

Memory Corruption

Proof Of Concept

PoC Available for CVE-2006-3912

CWE Category CWE-119
Published Date Jul 28, 2006
Modified Date Jun 16, 2026
Exploit Status Available
Score 2.1 CVSS v2.0
Exploit Probability (EPSS)
5.67%

Vulnerability Summary

CVE-2006-3912: Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.

Impacted Vendors

R
rarlab 1

Reference Links

http://www.osvdb.org/27031 http://www.rarlabs.com/rarnew.htm https://www.exploit-db.com/exploits/1984 https://www.exploit-db.com/exploits/1985 https://www.exploit-db.com/exploits/1992 http://www.osvdb.org/27031 http://www.rarlabs.com/rarnew.htm https://www.exploit-db.com/exploits/1984 https://www.exploit-db.com/exploits/1985 https://www.exploit-db.com/exploits/1992
CVSS v2.0
Source Entity [email protected]
Severity LOW
2.1
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:L/AC:L/Au:N/C:N/I:P/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2006-3912 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/1984
View Code
Exploit-DB https://www.exploit-db.com/exploits/1992
View Code
Exploit-DB https://www.exploit-db.com/exploits/1985
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected Stack

No specific products linked.