CVE-2017-14502

Name of the Vulnerable Software and Affected Versions libarchive version 3.3.2

Description The issue is related to an off-by-one error in the read header function for UTF-16 names in RAR archives, leading to an out-of-bounds read. This could allow a remote attacker to gain unauthorized access to information.

Recommendations For version 3.3.2, consider updating to a newer version that addresses this issue, as the current version suffers from an off-by-one error for UTF-16 names in RAR archives. At the moment, there is no information about a newer version that contains a fix for this vulnerability.