Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-25477 2 Krylack, Top Password Software 2 Rar Password Recovery, Rar Password Recovery 2026-07-15 6.2 Medium
RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration Code field to trigger an application crash.
CVE-2020-37193 2 Krylack, Top Password Software 2 Zip Password Recovery, Zip Password Recovery 2026-04-15 7.5 High
ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file.
CVE-2018-25218 2 Krylack, Passfab 2 Rar Password Recovery, Rar Password Recovery 2026-03-31 8.4 High
PassFab RAR Password Recovery 9.3.2 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a payload with a buffer overflow, NSEH jump, and shellcode, then paste it into the 'Licensed E-mail and Registration Code' field during registration to trigger code execution.
CVE-2020-28963 2 Krylack, Microsoft 2 Zip Password Recovery, Windows 2024-11-21 7.8 High
Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function.