CVE-2017-12940

Name of the Vulnerable Software and Affected Versions UnRAR versions prior to 5.5.7

Description The issue is caused by an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function of the libunrar.a library in UnRAR. This can be exploited by a remote attacker to cause the application to crash.

Recommendations For versions prior to 5.5.7, update to version 5.5.7 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Archive::ReadHeader15 function until a patch is available.