PT-2017-11810

CVE-2017-11190

·

Publicado

2017-07-12

·

Atualizado

2017-07-21

Descrição por

CVSS 3.1
7.8
Alta
MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions unrar-free version 0.0.1
Description The issue might allow remote attackers to cause a denial of service, resulting in a stack-based buffer overflow and application crash, or possibly have other unspecified impacts. This can occur when the DEBUG LOG mode is enabled and the software processes an RAR archive containing a long filename.
Recommendations For version 0.0.1, consider disabling the DEBUG LOG mode to minimize the risk of exploitation until a patch is available. Restrict access to RAR archives from untrusted sources to reduce the likelihood of encountering a malicious archive with a long filename.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾