CVE-2007-0855
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,...
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
CVE-2007-0855- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
CVE-2007-0855- Updated
- 2026-11-02
EUVDEUVD-2007-0852 No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
EUVD-2007-0852- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7ggr-fg9x-qrm2 No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,...
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
GHSA-7ggr-fg9x-qrm2- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
CVE-2007-0855- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0855 No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
DEBIAN-CVE-2007-0855- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rarDebian:12 |
before 1:3.7b1-1, plus listed versions 1:3.5.1-11:3.6.0-12.02-22.60-12.80-23.30-2 |
1:3.7b1-1 |
rarDebian:13 |
before 1:3.7b1-1, plus listed versions 1:3.5.1-11:3.6.0-12.02-22.60-12.80-23.30-2 |
1:3.7b1-1 |
rarDebian:14 |
before 1:3.7b1-1, plus listed versions 1:3.5.1-11:3.6.0-12.02-22.60-12.80-23.30-2 |
1:3.7b1-1 |
unrar-nonfreeDebian:12 |
before 1:3.7.3-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 4 moreShow less1:3.7.2-13.3.6-23.3.6-2.0.13.4.3-1 |
1:3.7.3-1 |
unrar-nonfreeDebian:13 |
before 1:3.7.3-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 4 moreShow less1:3.7.2-13.3.6-23.3.6-2.0.13.4.3-1 |
1:3.7.3-1 |
unrar-nonfreeDebian:14 |
before 1:3.7.3-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 4 moreShow less1:3.7.2-13.3.6-23.3.6-2.0.13.4.3-1 |
1:3.7.3-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0855 is a medium vulnerability (CVSS 6.8) in Rarlab Unrar, published February 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.01%, the 90th percentile. Fixed in rar 1:3.7b1-1.
References
osvdb.org/33124
novell.com/linux/security/advisories/2007_5_sr.html
securityfocus.com/bid/22447
vupen.com/english/advisories/2007/0523
secunia.com/advisories/24165
exchange.xforce.ibmcloud.com/vulnerabilities/32357