AZL-6784 CVE-2018-5996 affecting package p7zip for versions less than 16.02-22

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

AZL-35093 CVE-2018-5996 affecting package p7zip for versions less than 16.02-23

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

ALPINE-CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-5996

The CVE-2018-5996 entry affects 7-Zip (and p7zip) with a flaw in NCompress::NRar3::CDecoder::Code prior to version 18.00 that allows remote attackers to trigger memory corruptions in the PPMd code via a crafted RAR archive, potentially causing a denial of service or arbitrary code execution. Conn...

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

CVE-2018-5996

Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafted RAR archive...

p7zip-codec-rar -- insufficient error handling

MITRE reports: Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, alows remote attackers to cause a denial of service segmentation fault or execute arbitrary code via a crafte...

PT-2018-17281 · Igor Pavlov +2 · P7Zip +3

Name of the Vulnerable Software and Affected Versions: 7-Zip versions prior to 18.00 p7zip versions prior to 18.00 Description: The issue is related to insufficient exception handling in the method NCompress::NRar3::CDecoder::Code, which can lead to multiple memory corruptions within the PPMd cod...

GLSA-201710-21 : Kodi: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201710-21 Kodi: Arbitrary code execution Kodi is vulnerable due to shipping with an embedded version of UnRAR. Please review the referenced CVE identifier for details. Impact : A remote attacker, by enticing a user to process a...

Kodi: Arbitrary code execution

Background Kodi is a free and open source media-center and entertainment hub previously known as XBMC. Description Kodi is vulnerable due to shipping with an embedded version of UnRAR. Please review the referenced CVE identifier for details. Impact A remote attacker, by enticing a user to process...

Libarchive Rar RestartModel Code Execution Vulnerability(CVE-2016-4302)

SUMMARY An exploitable heap overflow vulnerability exists in the Rar decompression functionality of libarchive. A specially crafted Rar file can cause a heap corruption eventually leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS...

RAR, UnRAR: Multiple vulnerabilities

Background RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files. Description Multiple vulnerabilities have been discovered in RAR and UnRAR. Please review the referenced CVE identifiers for details. Impact A remote attacker, by enticing a user to open a...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

libarchive Denial of Service Vulnerability (CNVD-2017-27309)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the readheader of the archivereadsupportformatrar.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service 'archivereadformatrarreadheader'...

ALPINE-CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

DEBIAN-CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...