Xar Security Vulnerabilities

CVE-2020-12510

The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions which allow every local user to modify the content. The default installation registers TcSysUI.exe for.....

CVE-2017-11124

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in...

CVE-2017-11125

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in...