UN
Product
UnRAR
On CISA KEVExploited in the wildRansomware-linked
15
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 7Medium 1Low 0
Watch
Add UnRAR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12942 | 9.8 | Aug 18 | libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function Affected: through 5.5.6 |
| CVE-2017-12941 | 9.8 | Aug 18 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function Affected: through 5.5.6 |
| CVE-2017-12940 | 9.8 | Aug 18 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function Affected: through 5.5.6 |
| CVE-2012-6706 | 9.8 | Jun 22 | A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to… Affected: through 5.5.4 |
| CVE-2017-14122 | 9.1 | Sep 3 | unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp Affected: 0.0.1 |
Showing 5