Buffer overflow

Buffer overflow in the urarlibget function in Christian Scheurer UniquE RAR File Library unrarlib, aka URARFileLib 0.4 allows context-dependent attackers to execute arbitrary code via a long 1 filename, 2 rarfile, or 3 libpassword argument...

CVE-2007-1457

CVE-2007-1457 describes a buffer overflow in the urarlib_get function of Christian Scheurer’s UniquE RAR File Library (unrarlib/URARFileLib) v0.4. An attacker can cause arbitrary code execution by passing a long filename, rarfile, or libpassword to urarlib_get. The entry notes arbitrary code exec...

[Full-disclosure] Unrarlib 0.4.0 (urarlib_get) Local buffer overflow

Description: in file unrarlib.c don't exist the check control of size len filename passed in function urarlibget using strcpy Source error: -- char ArcName255; / RAR archive .. int urarlibgetvoid output, unsigned long size, char filename, void rarfile, char libpassword / Get a file from a RAR fil...