Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rc2h-948p-g7mf

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

EPSS

Процентиль: 70%
0.00649
Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
nvd
почти 7 лет назад

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVSS3: 8.8
fstec
почти 7 лет назад

Уязвимость архиватора файлов WinRAR, связанная с записью за границами буфера в памяти при извлечении файлов, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 70%
0.00649
Низкий

7.8 High

CVSS3

Дефекты

CWE-787