Stack-Based Buffer Over-Read Vulnerability in unrar 0.0.1

CVE-2017-14122 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.

Learn more about our Web Application Penetration Testing UK.