Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the copyfromlzsswindow function in archivereadsupportformatrar.c. An attacker can cause the process to read beyond the allocated heap buffer by crafting a filter block that exceeds the expected...