PT-2017-11810
CVE-2017-11190
·
تاريخ النشر
2017-07-12
·
تاريخ التحديث
2017-07-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
unrar-free version 0.0.1
Description
The issue might allow remote attackers to cause a denial of service, resulting in a stack-based buffer overflow and application crash, or possibly have other unspecified impacts. This can occur when the DEBUG LOG mode is enabled and the software processes an RAR archive containing a long filename.
Recommendations
For version 0.0.1, consider disabling the DEBUG LOG mode to minimize the risk of exploitation until a patch is available. Restrict access to RAR archives from untrusted sources to reduce the likelihood of encountering a malicious archive with a long filename.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾