Joerg Sonnenberger

2 exploits Active since Sep 2017

CVE-2017-14166 WRITEUP MEDIUM WRITEUP

libarchive 3.3.2 - Denial of Service via Crafted XAR Archive

libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c.

CVSS 6.5

View Code

CVE-2017-14502 WRITEUP HIGH WRITEUP

libarchive 3.3.2 - Out-of-bounds Read in RAR Archive UTF-16 Name Handling

read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header.

CVSS 7.5

View Code