Secunia Research has discovered two vulnerabilities in WinRAR, which can be exploited by malicious people to compromise a user's system.

1) A format string error exists when displaying a diagnostic error message that informs the user of an invalid filename in an UUE/XXE encoded file. This can be exploited to execute arbitrary code when a malicious UUE/XXE file is decoded.

2) A boundary error in UNACEV2.DLL can be exploited to cause a stack-based buffer overflow. This allows arbitrary code execution when a malicious ACE archive containing a file with an overly long file name is extracted.

Vulnerability #2 is related to:
SA14359

The vulnerabilities have been confirmed in version 3.50. Prior versions may also be affected.

Solution
Update to version 3.51.
Further details available to Secunia VIM customers

Provided and/or discovered by
Tan Chew Keong, Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
RARLAB:
http://www.rarlabs.com/rarnew.htm

Secunia Research:
http://secunia.com/secunia_research/2005-53/advisory/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers