CVE-2005-4438

Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers that contain incorrect values in the length field.

• http://secunia.com/advisories/18131Vendor Advisory
• http://securityreason.com/securityalert/276
• http://securitytracker.com/id?1015384
• http://www.kb.cert.org/vuls/id/305272US Government Resource
• http://www.rem0te.com/public/images/symc2.pdfVendor Advisory
• http://www.securityfocus.com/archive/1/419853/100/0/threaded
• http://www.securityfocus.com/bid/15971
• http://www.vupen.com/english/advisories/2005/3003
• http://secunia.com/advisories/18131Vendor Advisory
• http://securityreason.com/securityalert/276
• http://securitytracker.com/id?1015384
• http://www.kb.cert.org/vuls/id/305272US Government Resource
• http://www.rem0te.com/public/images/symc2.pdfVendor Advisory
• http://www.securityfocus.com/archive/1/419853/100/0/threaded
• http://www.securityfocus.com/bid/15971
• http://www.vupen.com/english/advisories/2005/3003

Published

Dec 21, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4432Cross-site scripting (XSS) vulnerability in index.php in Pla…
• CVE-2005-4433Cross-site scripting (XSS) vulnerability in search.php in Es…
• CVE-2005-4434Cross-site scripting (XSS) vulnerability in AbleDesign ReSea…
• CVE-2005-4435Cross-site scripting (XSS) vulnerability in index.php AbleDe…
• CVE-2005-4436Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as i…
• CVE-2005-4437MD5 Neighbor Authentication in Extended Interior Gateway Rou…
• CVE-2005-4439Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote atta…
• CVE-2005-4440The 802.1q VLAN protocol allows remote attackers to bypass n…
• CVE-2005-4441The PVLAN protocol allows remote attackers to bypass network…
• CVE-2005-4442Untrusted search path vulnerability in OpenLDAP before 2.2.2…
• CVE-2005-4443Untrusted search path vulnerability in Gauche before 0.8.6-r…
• CVE-2005-4444Stack-based buffer overflow in the trace message functionali…