CVE

Id
91121  
CVE No.
CVE-2016-4302  
Status
Candidate  
Description
Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.  
Phase
Assigned (20160427)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
783586 91121 CVE-2016-4302 MISC:http://blog.talosintel.com/2016/06/the-poisoned-archives.html  View
783587 91121 CVE-2016-4302 MISC:http://www.talosintel.com/reports/TALOS-2016-0154/  View
783588 91121 CVE-2016-4302 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1348444  View
783589 91121 CVE-2016-4302 CONFIRM:https://github.com/libarchive/libarchive/commit/05caadc7eedbef471ac9610809ba683f0c698700  View
783590 91121 CVE-2016-4302 CONFIRM:https://github.com/libarchive/libarchive/issues/719  View
783591 91121 CVE-2016-4302 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
783592 91121 CVE-2016-4302 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
783593 91121 CVE-2016-4302 REDHAT:RHSA-2016:1844  View
783594 91121 CVE-2016-4302 URL:http://rhn.redhat.com/errata/RHSA-2016-1844.html  View
783595 91121 CVE-2016-4302 BID:91331  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3267 JVNDB-2016-004040 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 複数の Apple 製品の libxml2 には、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2016-4615 91121 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004040.html  View