Description
Buffer overflow in the urarlib_get function in Christian Scheurer UniquE RAR File Library (unrarlib, aka URARFileLib) 0.4 allows context-dependent attackers to execute arbitrary code via a long (1) filename, (2) rarfile, or (3) libpassword argument.
References
- http://unrarlib.svn.sourceforge.net/viewvc/unrarlib/tags/unrarlib040/unrarlib/unrarlib.c?revision=3&view=markup
- 34076 vdb-entry
- 24472 third-party-advisory
- 22942 vdb-entry
- ADV-2007-0961 vdb-entry
- 20070313 Unrarlib 0.4.0 (urarlib_get) Local buffer overflow mailing-list