CVE-2007-0855
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,...
CVE-2007-0855 is a medium vulnerability (CVSS 6.8) in Rarlab Unrar, published February 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.01%, the 90th percentile. Fixed in rar 1:3.7b1-1.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 4.01%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:3.7b1-1rar +5 more
Description
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rarDebian:12 | before 1:3.7b1-1, plus listed versions 1:3.5.1-11:3.6.0-12.02-22.60-12.80-23.30-2 | 1:3.7b1-1 |
rarDebian:13 | before 1:3.7b1-1, plus listed versions 1:3.5.1-11:3.6.0-12.02-22.60-12.80-23.30-2 | 1:3.7b1-1 |
rarDebian:14 | before 1:3.7b1-1, plus listed versions 1:3.5.1-11:3.6.0-12.02-22.60-12.80-23.30-2 | 1:3.7b1-1 |
unrar-nonfreeDebian:12 | before 1:3.7.3-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 4 moreShow less1:3.7.2-13.3.6-23.3.6-2.0.13.4.3-1 | 1:3.7.3-1 |
unrar-nonfreeDebian:13 | before 1:3.7.3-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 4 moreShow less1:3.7.2-13.3.6-23.3.6-2.0.13.4.3-1 | 1:3.7.3-1 |
unrar-nonfreeDebian:14 | before 1:3.7.3-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 4 moreShow less1:3.7.2-13.3.6-23.3.6-2.0.13.4.3-1 | 1:3.7.3-1 |
What each source reports
NVD Score used
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
CVE-2007-0855- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
CVE-2007-0855- Updated
- 2026-11-02
EUVDEUVD-2007-0852No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
EUVD-2007-0852- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7ggr-fg9x-qrm2No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,...
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
GHSA-7ggr-fg9x-qrm2- Updated
- 2026-11-02
OSVNo score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
CVE-2007-0855- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0855No score
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive.
- Record
DEBIAN-CVE-2007-0855- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.