Vulnerabilities > Rarlab > Unrar

DATE CVE VULNERABILITY TITLE RISK
2017-08-18 CVE-2017-12938 Path Traversal vulnerability in Rarlab Unrar 0.0.1/5.5.4/5.5.6
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the .
network
low complexity
rarlab CWE-22
7.5
2017-06-22 CVE-2012-6706 Integer Overflow or Wraparound vulnerability in multiple products
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution.
network
low complexity
sophos rarlab CWE-190
critical
9.8