unrar/unrar_fuzzer: Index-out-of-bounds in Unpack::LongLZ

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=4683334295748608 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerubsanunrar Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

CVE-2017-16869

CVE-2017-16869 concerns UPX 3.94 where p_mach.cpp (in the canPack and unpack paths) can be triggered by a crafted Mach-O file to cause a denial of service via an invalid memory access, with the vendor stating there is no security implication. SUSE/Security entries reiterate the affected UPX 3.94 ...

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

CVE-2017-16869

pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...

PT-2017-14606 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: UPX version 3.94 Description: The issue allows remote attackers to cause a denial of service, resulting in invalid memory access and application crash, or possibly have other unspecified impacts via a crafted Mach-O file. This is related to t...

[SECURITY] Fedora 25 Update: tnef-1.4.15-1.fc25

This application provides a way to unpack Microsoft MS-TNEF MIME attachment s. It operates like tar in order to unpack files of type "application/ms-tnef", which may have been placed into the MS-TNEF attachment instead of being attached separately. Such files may have attachment names similar to...

CVE-2017-15056

plxelf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack...

UBUNTU-CVE-2017-15056

plxelf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack...

DEBIAN-CVE-2017-15046

LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpackreadsamples in frontend/getaudio.c, a different vulnerability than CVE-2017-9412...

PT-2017-13841 · Upx Team +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: UPX version 3.94 Description: The issue is related to the handling of ELF headers in the p lx elf.cpp file, which can be exploited by remote attackers using a crafted binary file. This exploitation can lead to a denial of service, causing the...

The vulnerability of the Unpack::LongLZ function in the libunrar.a library, a file decompression tool for the UnRAR archive, allows a malicious actor to cause the application to terminate abnormally.

The vulnerability of the Unpack::LongLZ function in the libunrar.a library, a tool for decompressing UnRAR files, arises due to buffer overflows. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to terminate abnormally...

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a file archiver for the UnRAR archive format, allows a malicious actor to cause the application to terminate abnormally.

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a tool for decompressing UnRAR files, arises from operations that go beyond the boundaries of memory buffers reading from locations outside of memory space. Exploiting this vulnerability can allow an attacker to cause t...

UnRAR 'Unpack::LongLZ' Function Buffer Overflow Vulnerability

UnRAR is a command line document decompression program for use on Windows and Linux platforms. A buffer overflow vulnerability in the 'Unpack::LongLZ' function of the UnRAR libunrar.a file allows remote attackers to exploit the vulnerability to construct a malicious file that can be parsed by the...

UnRAR 'Unpack::Unpack20' function out-of-bounds read vulnerability

UnRAR is a command line document decompression program for use on Windows and Linux platforms. An out-of-bounds read vulnerability in the 'Unpack::Unpack20' function of the UnRAR libunrar.a file allows remote attackers to exploit the vulnerability to construct a malicious file that can be parsed ...

CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

CVE-2017-12941

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

UBUNTU-CVE-2017-12941

libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function...

UBUNTU-CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...