CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-10115

The CVE-2018-10115 issue affects 7-Zip 18.03 and earlier, where incorrect initialization of RAR decoder objects can lead to uninitialized memory usage. This can enable a remote attacker to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive. Mitigati...

CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

KLA11240 Critical vulnerability in 7-Zip

A critical vulnerability was found in 7-Zip. By exploiting this vulnerability malicious users can cause denial or service or execute arbitrary code. This vulnerability can be exploited remotely via a specially crafted RAR archive. NB: This vulnerability does not have any public CVSS rating, so...

p7zip -- usage of uninitialized memory

NVD reports: Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

Denial Of Service (DoS) Through Null Pointer Access

libarchive.so is susceptible to Denial of Service DoS through null pointer access. The vulnerability is possible when the header is a split file in multivolume RAR, it does not properly check the file name and flag for multivolume, allowing the attacker to parse malicious .rar files...

The vulnerability of the Microsoft Malware Protection Engine’s protection module against malicious programs arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine’s protection module mpengine.dll is related to insufficient input data validation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges using a specially crafted rar file...

Microsoft Windows Defender - mpengine.dll Memory Corruption Exploit

Exploit for windows platform in category dos / poc Windows Defender inspects a variety of different archive formats, among others RAR. Inspection of mpengine.dll revealed that the code responsible for processing RAR archives appears to be a forked and modified version of the original unrar code;...

Microsoft Windows Defender - mpengine.dll Memory Corruption

Microsoft Windows Defender - mpengine.dll Memory Corruption Windows Defender inspects a variety of different archive formats, among others RAR. Inspection of mpengine.dll revealed that the code responsible for processing RAR archives appears to be a forked and modified version of the original unr...

Microsoft Windows Defender - 'mpengine.dll' Memory Corruption

Windows Defender inspects a variety of different archive formats, among others RAR. Inspection of mpengine.dll revealed that the code responsible for processing RAR archives appears to be a forked and modified version of the original unrar code; given that it still processes the VMSFUPCASE filter...

openSUSE Security Update : p7zip (openSUSE-2018-188)

This update for p7zip fixes the following security issues : - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR decompression...

SUSE SLED12 / SLES12 Security Update : p7zip (SUSE-SU-2018:0464-1)

This update for p7zip fixes the following issues: Security issues fixed : - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR...

SUSE-SU-2018:0464-1 Security update for p7zip

This update for p7zip fixes the following issues: Security issues fixed: - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR...

FreeBSD : p7zip-codec-rar -- insufficient error handling (7a2e0063-0e4e-11e8-94c0-5453ed2e2b49)

MITRE reports : Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, alows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a craft...

7-Zip and p7zip Memory Corruption Vulnerability

7-Zip is a free, open source compression/decompression software. p7zip is its version for Linux-based platforms. A security vulnerability exists in the NCompress::NRar3::CDecoder::Code method in 7-Zip prior to version 18.00 and p7zip, which stems from the program's failure to properly handle...

Design/Logic Flaw

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

UBUNTU-CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...