CVE-2017-12941: Critical severity unrar vulnerability
Published Aug 18, 2017
·Updated
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
Affected Software
1 affected component
RARLAB UnRAR<=5.5.6
Event History
Aug 18, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12941?
CVE-2017-12941 is classified as a medium severity vulnerability due to the potential for information disclosure.
2
How do I fix CVE-2017-12941?
To remediate CVE-2017-12941, upgrade to UnRAR version 5.5.7 or later.
3
What type of vulnerability is CVE-2017-12941?
CVE-2017-12941 is an out-of-bounds read vulnerability affecting the Unpack::Unpack20 function.
4
What software is affected by CVE-2017-12941?
CVE-2017-12941 affects UnRAR versions prior to 5.5.7.
5
Can CVE-2017-12941 lead to system compromise?
While CVE-2017-12941 may lead to information leakage, it is not typically associated with full system compromise.