CVE-2012-6706
CriticalSummary
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, used in Sophos Anti-Virus Threat Detection Engine before 3.37.2, which can lead to arbitrary code execution. An integer overflow in DataSize+CurChannel results in a negative value for the 'DestPos' variable, allowing the attacker to write out of bounds.
Risk Assessment
This vulnerability poses a serious risk to organizations, enabling attackers to execute arbitrary code on compromised systems. This could lead to data loss, system takeover, or other severe security incidents.
Recommendation
It is recommended to update unrar to version 5.5.5 or later and the Sophos Anti-Virus Threat Detection Engine to version 3.37.2 or later to mitigate this vulnerability.
Original NVD description (English source)
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].