CVE-2005-4438

N/A Unknown
Published: December 21, 2005 Modified: April 16, 2026
View on NVD

Description

Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers that contain incorrect values in the length field.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/18131
Source: cve@mitre.org
Vendor Advisory
http://securityreason.com/securityalert/276
Source: cve@mitre.org
http://securitytracker.com/id?1015384
Source: cve@mitre.org
http://www.kb.cert.org/vuls/id/305272
Source: cve@mitre.org
US Government Resource
http://www.rem0te.com/public/images/symc2.pdf
Source: cve@mitre.org
Vendor Advisory
http://www.securityfocus.com/archive/1/419853/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/15971
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2005/3003
Source: cve@mitre.org
http://secunia.com/advisories/18131
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securityreason.com/securityalert/276
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1015384
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.kb.cert.org/vuls/id/305272
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.rem0te.com/public/images/symc2.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.securityfocus.com/archive/1/419853/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/15971
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2005/3003
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
10.7%
93th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

dec2rar.dll