Published: 08/02/2007 Updated: 29/07/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote malicious users to execute arbitrary code via a crafted, password-protected archive.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rarlab unrar 3.60
rarlab unrar 3.61

Debian Bug report logs - #410580 CVE-2007-0855: Stack-based buffer overflow in Unrar Package: unrar; Maintainer for unrar is Martin Meredith <mez@debianorg>; Source for unrar is src:unrar-nonfree (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Sun, 11 Feb 2007 21:18:08 UTC Severity: grave T ...

NVD-CWE-Other http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=472 http://www.securityfocus.com/bid/22447 http://securitytracker.com/id?1017593 http://secunia.com/advisories/24077 http://security.gentoo.org/glsa/glsa-200702-04.xml http://secunia.com/advisories/24165 http://www.novell.com/linux/security/advisories/2007_5_sr.html http://osvdb.org/33124 http://www.vupen.com/english/advisories/2007/0523 https://exchange.xforce.ibmcloud.com/vulnerabilities/32357 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=410580 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0855

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect