Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
rarlab vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2017-14120
unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.
Rarlab Unrar 0.0.1
Debian Debian Linux 9.0
5
CVSSv2
CVE-2017-12938
UnRAR prior to 5.5.7 allows remote malicious users to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
Rarlab Unrar
4.6
CVSSv2
CVE-2005-4620
Buffer overflow in WinRAR 3.50 and previous versions allows local users to execute arbitrary code via a long command-line argument. NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specif...
Rarlab Winrar 3.0.0
Rarlab Winrar 3.10
Rarlab Winrar 3.41
Rarlab Winrar 3.42
Rarlab Winrar 3.11
Rarlab Winrar 3.20
Rarlab Winrar 2.90
Rarlab Winrar 3.30
Rarlab Winrar 3.40
Rarlab Winrar 3.10 Beta3
Rarlab Winrar 3.10 Beta5
Rarlab Winrar 3.50
2 EDB exploits
4.6
CVSSv2
CVE-2003-1445
Stack-based buffer overflow in Far Manager 1.70beta1 and previous versions allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.
Rarlab Far Manager 1.65
Rarlab Far Manager 1.70 Beta 1
Rarlab Far Manager 1.70 Beta 4
1 EDB exploit
4.3
CVSSv2
CVE-2018-20251
In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates files and folders as written in the filename field even when WinRAR validator noticed the traversal att...
Rarlab Winrar
1 Github repository
4.3
CVSSv2
CVE-2017-14121
The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.
Rarlab Unrar 0.0.1
Debian Debian Linux 9.0
4.3
CVSSv2
CVE-2014-9983
Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote malicious users to write to arbitrary files via a crafted archive.
Rarlab Rar 5.20
Rarlab Rar 5.21
Rarlab Rar 5.30
Rarlab Rar 5.31
Rarlab Rar 4.11
Rarlab Rar 4.20
Rarlab Rar 5.50
Rarlab Rar 4.01
Rarlab Rar 5.01
Rarlab Rar 5.11
Rarlab Rar 5.40
Rarlab Rar 5.00
Rarlab Rar 4.00
Rarlab Rar 4.10
Rarlab Rar 5.10
4.3
CVSSv2
CVE-2007-3726
Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote malicious users to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed nu...
Rarlab Unrar 3.70 Beta 3
3.7
CVSSv2
CVE-2015-5663
The file-execution functionality in WinRAR prior to 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user.
Rarlab Winrar
2.6
CVSSv2
CVE-2005-0331
Directory traversal vulnerability in WinRAR 3.42 and previous versions, when the user clicks on the ZIP file to extract it, allows remote malicious users to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.
Rarlab Winrar 3.0.0
Rarlab Winrar 3.41
Rarlab Winrar 3.42
Rarlab Winrar 3.20
Rarlab Winrar 3.40
Rarlab Winrar 3.10 Beta5
Rarlab Winrar 3.11
Rarlab Winrar 3.10
Rarlab Winrar 3.10 Beta3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »