Description
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
Affected products
- RARLAB / UnRAR3.60 – 3.60
- RARLAB / UnRAR3.61 – 3.61
References
- MISChttp://osvdb.org/33124
- VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2007_5_sr.html
- MISChttp://www.securityfocus.com/bid/22447
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/0523
- VENDOR_ADVISORYhttp://secunia.com/advisories/24165
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/32357
- MISChttp://security.gentoo.org/glsa/glsa-200702-04.xml
- VENDOR_ADVISORYhttp://secunia.com/advisories/24077
- MISChttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=472
- MISChttp://securitytracker.com/id?1017593
Updated 16m ago · 8 sources