Vulnerabilities > CVE-2007-3726 - Denial-Of-Service vulnerability in Rarlab Unrar 3.70Beta3

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
rarlab
NVD
Published: 2007-07-12
Updated: 2018-10-15

Summary

Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed number to be cast to a large unsigned number.

Vulnerable Configurations

Part Description Count
Application
Rarlab
1

References