The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.
The product dereferences a pointer that it expects to be valid but is NULL.
Link | Tags |
---|---|
https://bugs.debian.org/874061 | issue tracking third party advisory |
http://www.openwall.com/lists/oss-security/2017/08/20/1 | third party advisory mailing list |
https://lists.debian.org/debian-lts-announce/2021/02/msg00026.html | third party advisory mailing list |