Denial of Service Vulnerability in libarchive 3.3.2 via Crafted xar Archive

Denial of Service Vulnerability in libarchive 3.3.2 via Crafted xar Archive

CVE-2017-14166 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.

Learn more about our Web Application Penetration Testing UK.