UnRAR 'Unpack::LongLZ' Function Buffer Overflow Vulnerability

UnRAR is a command line document decompression program for use on Windows and Linux platforms. A buffer overflow vulnerability in the 'Unpack::LongLZ' function of the UnRAR libunrar.a file allows remote attackers to exploit the vulnerability to construct a malicious file that can be parsed by the...

CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

UBUNTU-CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

DEBIAN-CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

UBUNTU-CVE-2017-12941

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

CVE-2017-12941

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

CVE-2017-12941

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

CVE-2017-12942

CVE-2017-12942 is a vulnerability in libunrar.a used by UnRAR prior to 5.5.7, caused by a buffer overflow in the Unpack::LongLZ function. The issue is documented in multiple advisories and was addressed in the SUSE/SUSE-SU updates for unrar (e.g., SUSE-SU-2021:2834-1) and related OSV entries, whi...

CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

CVE-2017-12942: Improper Restriction of Operations within the Bounds of a Memory Buffer

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

CVE-2017-12941: Out-of-bounds Read

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

PT-2017-2761

Name of the Vulnerable Software and Affected Versions UnRAR versions prior to 5.5.7 Description The issue is caused by an out-of-bounds read in the Unpack::Unpack20 function of the libunrar.a library in UnRAR. This can allow a remote attacker to cause the application to crash. Recommendations For...

PT-2017-2760

Name of the Vulnerable Software and Affected Versions UnRAR versions prior to 5.5.7 Description The issue is caused by a buffer overflow in the Unpack::LongLZ function of the libunrar.a library in UnRAR. This can allow a remote attacker to cause the application to crash. Recommendations For...

ALPINE-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

UBUNTU-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

PT-2017-18902

Name of the Vulnerable Software and Affected Versions LAME version 3.99.5 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and application crash, by using a crafted wav file. This is due to a problem in the unpack read samples functio...

Integer Overflow Vulnerability in libmtp 'ptp_unpack_EOS_CustomFuncEx' Function

libmtp is an LGPL library for the Media Transport Protocol. An integer overflow vulnerability exists in the 'ptpunpackEOSCustomFuncEx' function of the ptp-pack.c file in libmtp versions 1.1.12 and earlier. A remote attacker could exploit this vulnerability by plugging a mobile device into a PC vi...

UBUNTU-CVE-2017-9832

An integer overflow vulnerability in ptp-pack.c ptpunpackOPL function of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable...

DEBIAN-CVE-2017-9832

An integer overflow vulnerability in ptp-pack.c ptpunpackOPL function of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable...