CVE-2017-14166

2017-09-06T14:29:00
ID CVE-2017-14166
Type cve
Reporter NVD
Modified 2017-09-08T16:37:11

Description

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.