Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3935-5wqm-4j94

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

EPSS

Процентиль: 72%
0.00733
Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
nvd
около 7 лет назад

In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVSS3: 8.8
fstec
почти 7 лет назад

Уязвимость архиватора файлов WinRAR, связанная с записью за границами буфера в памяти при извлечении файлов, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 72%
0.00733
Низкий

7.8 High

CVSS3

Дефекты

CWE-787