Vulnerabilities (CVE)

Filtered by vendor Rarlab Subscribe
Filtered by product Unrar
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3726 1 Rarlab 1 Unrar 2018-10-15 4.3 MEDIUM N/A
Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed number to be cast to a large unsigned number.
CVE-2007-0855 1 Rarlab 1 Unrar 2017-07-29 6.8 MEDIUM N/A
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.