PT-2017-11810

CVE-2017-11190

·

تاريخ النشر

2017-07-12

·

تاريخ التحديث

2017-07-21

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions unrar-free version 0.0.1
Description The issue might allow remote attackers to cause a denial of service, resulting in a stack-based buffer overflow and application crash, or possibly have other unspecified impacts. This can occur when the DEBUG LOG mode is enabled and the software processes an RAR archive containing a long filename.
Recommendations For version 0.0.1, consider disabling the DEBUG LOG mode to minimize the risk of exploitation until a patch is available. Restrict access to RAR archives from untrusted sources to reduce the likelihood of encountering a malicious archive with a long filename.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾