EUVD-2018-13799

Malware in sbrugna...

The vulnerability of the QuickOpen::ReadRaw function in the UnRAR file decompression tool allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QuickOpen::ReadRaw function in the UnRAR decompression tool is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2018-25018

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext...

CVE-2018-25018

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext...

CVE-2018-25018

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext...

CVE-2018-25018

CVE-2018-25018 affects UnRAR 5.6.1.7 through 5.7.4 and 6.0.3. The issue is an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when invoked via QuickOpen::ReadNext. The connected records corroborate the same description across multiple sources (NVD, OSV/Open Vulnerability databases, Red ...

CVE-2018-25018

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext...

OSV-2018-204 UNKNOWN WRITE in __msan_memcpy.part.51

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9845 Crash type: UNKNOWN WRITE Crash state: msanmemcpy.part.51 QuickOpen::ReadRaw QuickOpen::ReadNext...

unrar/unrar_fuzzer: Negative-size-param in QuickOpen::ReadRaw

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=6239488958267392 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...