Rarlab Archives - CVE Vulnerability

CVE-2008-7144

Sun, 26 Feb 2023 09:11:53 +0000

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.

The post CVE-2008-7144 appeared first on CVE Vulnerability.

CVE-2007-3726

Sun, 26 Feb 2023 09:06:52 +0000

Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed number to be cast to a large unsigned number.

The post CVE-2007-3726 appeared first on CVE Vulnerability.

CVE-2007-0855

Sun, 26 Feb 2023 09:05:38 +0000

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.

The post CVE-2007-0855 appeared first on CVE Vulnerability.

CVE-2018-25018

Sun, 26 Feb 2023 06:49:04 +0000

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.

The post CVE-2018-25018 appeared first on CVE Vulnerability.

CVE-2018-20250

Sun, 26 Feb 2023 06:48:31 +0000

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.

The post CVE-2018-20250 appeared first on CVE Vulnerability.

CVE-2018-20251

Sun, 26 Feb 2023 06:48:31 +0000

In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates files and folders as written in the filename field even when WinRAR validator noticed the traversal attempt and requestd to abort the extraction process. the operation is cancelled only after the folders and files were created but prior to them being written, therefore allowing the attacker to create empty files and folders everywhere in the file system.

The post CVE-2018-20251 appeared first on CVE Vulnerability.

CVE-2018-20252

Sun, 26 Feb 2023 06:48:31 +0000

In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

The post CVE-2018-20252 appeared first on CVE Vulnerability.

CVE-2018-20253

Sun, 26 Feb 2023 06:48:31 +0000

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

The post CVE-2018-20253 appeared first on CVE Vulnerability.