CVE-2012-6706: Integer Overflow
First published: Thu Jun 22 2017(Updated: )
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sophos Scanning Engine | <=3.36.2 | |
| UnRAR | <=5.5.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1027725
- http://telussecuritylabs.com/threats/show/TSL20121207-01
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1286
- https://community.sophos.com/kb/en-us/118424#six
- https://kc.mcafee.com/corporate/index?page=content&id=SB10205
- https://lock.cmpxchg8b.com/sophailv2.pdf
- https://nakedsecurity.sophos.com/2012/11/05/tavis-ormandy-sophos/
- https://security.gentoo.org/glsa/201708-05
- https://security.gentoo.org/glsa/201709-24
- https://security.gentoo.org/glsa/201804-16
Frequently Asked Questions
What is the severity of CVE-2012-6706?
CVE-2012-6706 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2012-6706?
To fix CVE-2012-6706, upgrade Sophos Anti-Virus Threat Detection Engine to version 3.37.2 or later and UnRAR to version 5.5.5 or later.
What types of products are affected by CVE-2012-6706?
CVE-2012-6706 primarily affects Sophos Anti-Virus Threat Detection Engine and RARLAB UnRAR prior to their respective fixed versions.
What are the consequences of exploiting CVE-2012-6706?
Exploiting CVE-2012-6706 can lead to memory corruption and execution of arbitrary code on compromised systems.
Which versions of Sophos are vulnerable to CVE-2012-6706?
Versions of Sophos Anti-Virus Threat Detection Engine up to and including 3.36.2 are vulnerable to CVE-2012-6706.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/sophos
- canonical/sophos scanning engine
- version/sophos scanning engine/3.36.2
- vendor/rarlab
- canonical/unrar
- version/unrar/5.5.4