Insecure functionality In unrar-free
Description
The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 1:0.0.1+cvs20140707-4 | ||
debian 12 | 1:0.0.1+cvs20140707-4 | ||
debian 13 | 1:0.0.1+cvs20140707-4 |
Aliases
1. 2. 3. 4. 5.