CVE-2017-14502

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an…

published September 17, 2017

CVSS
—
EPSS
3%
Percentile
88.7
In the wild
Unconfirmed
What it is

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03367 · 88.7th percentile
Published
2017-09-17T18:00Z
EPSS history
Timeline
  • 17 SEP 18:00Z
    read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an…
    cvelistv5