CVE-2017-14122

Critical

Published: 03/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Unrar version 0.0.1 (also known as unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.

Risk Assessment

This vulnerability may lead to unauthorized memory access, posing a risk of data leakage or execution of malicious code.

Recommendation

It is recommended to update to the latest version of unrar to mitigate this vulnerability.

Original NVD description (English source)

unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp.