CVE-2017-14120

This CVE concerns unrar-free (aka unrar-gpl) with a directory traversal vulnerability for RAR v2 archives. Specifically, pathnames such as ../filename are unpacked into the parent directory, exposing potential writes outside the intended extraction directory. Technical details across connected do...

CVE-2017-14122

The CVE-2017-14122 issue affects unrar-free (unrar 0.0.1). It is a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp. Debian and OSV/NVD records confirm the vulnerability and provide a fixed package version (Debian 1:0.0.1+cvs20140707-1+deb9u1). Impact details from CVSS...

CVE-2017-14121

The DecodeNumber function in unrarlib.c in unrar 0.0.1 aka unrar-free or unrar-gpl suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references...

CVE-2017-14121

The DecodeNumber function in unrarlib.c in unrar 0.0.1 aka unrar-free or unrar-gpl suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references...

CVE-2017-14120

unrar 0.0.1 aka unrar-free or unrar-gpl suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../filename are unpacked into the upper directory...

CVE-2017-14121

CVE-2017-14121 affects unrarlib.c in unrar-free / unrar-gpl (version 0.0.1). The flaw is a NULL pointer dereference triggered by a crafted RAR archive, potentially causing an application crash. Debian and OSV/Nessus entries note this alongside related CVEs and report a fix in Debian’s unrar-free ...

CVE-2017-14120

unrar 0.0.1 aka unrar-free or unrar-gpl suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../filename are unpacked into the upper directory...

MGASA-2017-0302 Updated unrar packages fix security vulnerabilities

VMSFDELTA memory corruption CVE-2012-6706. Directory traversal issue in UnRAR before 5.5.7 CVE-2017-12938. libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function CVE-2017-12940. libunrar.a in UnRAR before 5.5.7 has a...

Updated unrar packages fix security vulnerabilities

VMSFDELTA memory corruption CVE-2012-6706. Directory traversal issue in UnRAR before 5.5.7 CVE-2017-12938. libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function CVE-2017-12940. libunrar.a in UnRAR before 5.5.7 has a...

Updated unrar packages fix security vulnerabilities

Directory traversal issue in UnRAR before 5.5.7 CVE-2017-12938. libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function CVE-2017-12940. libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack2...

MGASA-2017-0304 Updated unrar packages fix security vulnerabilities

Directory traversal issue in UnRAR before 5.5.7 CVE-2017-12938. libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function CVE-2017-12940. libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack2...

UnRAR 'Unpack::Unpack20' function out-of-bounds read vulnerability

UnRAR is a command line document decompression program for use on Windows and Linux platforms. An out-of-bounds read vulnerability in the 'Unpack::Unpack20' function of the UnRAR libunrar.a file allows remote attackers to exploit the vulnerability to construct a malicious file that can be parsed ...

GLSA-201708-05 : RAR and UnRAR: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201708-05 RAR and UnRAR: User-assisted execution of arbitrary code A VMSFDELTA memory corruption was discovered in which an integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the DestPos...

CVE-2017-12941

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

CVE-2017-12940

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...

Out-of-bounds

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...

CVE-2017-12940

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function...

CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

CVE-2017-12941

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

UBUNTU-CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...