QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-3726

Back to search

CVE-2007-3726

Published: Jul 12, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed number to be cast to a large unsigned number.

VendorProductVersions

n/a

n/a

affected
n/a

References

20070731 FLEA-2007-0037-1 unrar
mailing-list
x_refsource_BUGTRAQ
39603
vdb-entry
x_refsource_OSVDB
2880
third-party-advisory
x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now