high7.8
CVE-2017-20006
UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).
Impact
UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rarlab | Unrar | Versions 5.6.1.2, 5.6.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4373
- https://github.com/aawc/unrar/commit/0ff832d31470471803b175cfff4e40c1b08ee779
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2017-104.yaml
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4373
- https://github.com/aawc/unrar/commit/0ff832d31470471803b175cfff4e40c1b08ee779
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2017-104.yaml