380 matches found
unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::ConvertFileHeader
Detailed report: https://oss-fuzz.com/testcase?key=5770301599121408 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::ConvertFileHeader...
unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::GetComment
Detailed report: https://oss-fuzz.com/testcase?key=5413862464552960 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::GetComment Archive::ViewComme...
unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::ConvertAttributes
Detailed report: https://oss-fuzz.com/testcase?key=6138344258928640 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::ConvertAttributes...
unrar/unrar_fuzzer: Use-of-uninitialized-value in CommandData::ParseArg
Detailed report: https://oss-fuzz.com/testcase?key=6167156443054080 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CommandData::ParseArg start Sanitizer:...
The vulnerability of the ExtrFile and stricomp functions (unrarlib.c) of the unrar-free or unrar-gpl package, a file decompression tool for UnRAR, allows a hacker to bypass the catalog and trigger a service failure.
The vulnerability of the ExtrFile and stricomp functions unrarlib.c in the unrar-free or unrar-gpl package, a tool for decompressing UnRAR files, arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to bypass the...
GLSA-201710-21 : Kodi: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201710-21 Kodi: Arbitrary code execution Kodi is vulnerable due to shipping with an embedded version of UnRAR. Please review the referenced CVE identifier for details. Impact : A remote attacker, by enticing a user to process a...
RAR, UnRAR: Multiple vulnerabilities
Background RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files. Description Multiple vulnerabilities have been discovered in RAR and UnRAR. Please review the referenced CVE identifiers for details. Impact A remote attacker, by enticing a user to open a...
The vulnerability of the VMSF_DELTA memory component of the UnRAR file decompression tool and the Sophos Anti-Virus antivirus protection allows a perpetrator to execute arbitrary code.
The vulnerability of the VMSFDELTA component, a file decompression tool, and the UnRAR decompression tool is caused by a numerical overflow. This occurs when the variable MemDestPos exceeds its allowable limits due to the negative value of the argument DestPos during the summation of DataSize and...
openSUSE Security Update : unrar (openSUSE-2017-724)
This update for unrar to version 5.5 fixes the following issues : Version 5.5.5 - CVE-2012-6706: fixes VMSFDELTA memory corruption boo1045315 see https://bugs.chromium.org/p/project-zero/issues/detail?i d=1286&can=1&q=unrar&desc=2 Version 5.5.1 - Based on RAR 5.50 beta1 - Added extraction support...
The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a file archiver for the UnRAR archive format, allows a malicious actor to cause the application to terminate abnormally.
The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a tool for decompressing UnRAR files, arises from operations that go beyond the boundaries of memory buffers reading from locations outside of memory space. Exploiting this vulnerability can allow an attacker to cause t...
The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, allows a malicious actor to cause an unexpected termination of the application.
The vulnerability of the Archive::ReadHeader15 function in the libunrar.a library, a tool for decompressing UnRAR files, arises due to the execution of an operation beyond the buffer boundaries in memory reading beyond the memory boundaries when calling EncodeFileName::Decode. Exploiting this...
Debian DLA-1091-1 : unrar-free security update
It was discovered that there was a directory traversal vulnerability in unrar-free, a unarchiver for .rar files, where pathnames of the form '../filename' were unpacked into the parent directory. For Debian 7 'Wheezy', this issue has been fixed in unrar-free version 1:0.0.1+cvs20071127-2+deb7u1. ...
[SECURITY] [DLA 1091-1] unrar-free security update
Package : unrar-free Version : 1:0.0.1+cvs20071127-2+deb7u1 CVE ID : CVE-2017-14120 Debian Bug : 874059 It was discovered that there was a directory traversal vulnerability in unrar-free, a unarchiver for .rar files, where pathnames of the form "../filename" were unpacked into the parent director...
DLA-1091-1 unrar-free - security update
Bulletin has no description...
unrar directory traversal vulnerability
unrar also known as unrar-free or unrar-gpl is a decompression software used in Linux. A directory traversal vulnerability exists in unrar version 0.0.1. An attacker can exploit this vulnerability to decompress RAR v2 archives into an upper level directory...
unrar buffer overflow vulnerability
unrar also known as unrar-free or unrar-gpl is a decompression software used in Linux. A buffer overflow vulnerability exists in the unrarlib.c file in unrar version 0.0.1. A remote attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...
unrar null pointer dereference vulnerability
unrar also known as unrar-free or unrar-gpl is a decompression software used in Linux. A security vulnerability exists in the 'DecodeNumber' function of the unrarlib.c file in unrar version 0.0.1. The vulnerability can be exploited to cause a denial of service null pointer backreference with the...
CVE-2017-14121
The DecodeNumber function in unrarlib.c in unrar 0.0.1 aka unrar-free or unrar-gpl suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references...