CVE-2004-1254

CVE-2004-1254 describes a critical vulnerability in WinRAR 3.40 and earlier versions, allowing remote code execution through specially crafted ZIP files containing excessively long filenames. This flaw likely stems from an integer overflow leading to a buffer overflow. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication and having a low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, an ExploitDB entry exists, and the vulnerability garners significant community discussion, indicating potential interest despite no known active exploitation.