{"id":"CVE-2012-6706","aliases":["ALPINE-CVE-2012-6706","DEBIAN-CVE-2012-6706","DLA-1003-1","DLA-1014-1","EUVD-2012-6548","GHSA-x9pf-gc5f-vghh","MGASA-2017-0302","SUSE-SU-2017:1716-1","SUSE-SU-2017:1745-1","SUSE-SU-2017:1760-1","SUSE-SU-2017:1763-1","SUSE-SU-2018:0809-1","SUSE-SU-2018:0862-1","SUSE-SU-2018:0863-1","SUSE-SU-2021:2834-1","UBUNTU-CVE-2012-6706","openSUSE-SU-2024:10685-1"],"status":"published","title":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus...","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.10108,"percentile":0.95674,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2017-06-22T13:00:00Z","modified":"2026-11-03T06:30:04Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"clamav","fixed_in":["0.99.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libclamunrar","fixed_in":["0.99-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libclamunrar","fixed_in":["0.99-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libclamunrar","fixed_in":["0.99-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"unrar-nonfree","fixed_in":["1:5.5.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"unrar-nonfree","fixed_in":["1:5.5.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"unrar-nonfree","fixed_in":["1:5.5.5-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"unrar-nonfree","fixed_in":["1:4.1.4-1+deb7u2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libclamunrar","fixed_in":["0.99-0+deb7u2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"clamav","fixed_in":["0.99.2-32.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 6","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"unrar","fixed_in":["5.0.14-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"unrar","fixed_in":["3.80.2-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"unrar","fixed_in":["3.80.2-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"unrar","fixed_in":["3.80.2-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"unrar","fixed_in":["3.80.2-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"unrar","fixed_in":["3.80.2-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"clamav","fixed_in":["0.99.2-0.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"clamav","fixed_in":["0.99.2-0.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"clamav","fixed_in":["0.99.2-0.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"clamav","fixed_in":["0.99.2-0.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"clamav","fixed_in":["0.99.2-0.19.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libclamunrar","fixed_in":["0.99-0ubuntu0.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libclamunrar","fixed_in":["0.99-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"unrar-nonfree","fixed_in":["1:5.3.2-1+deb9u1build0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libclamunrar","fixed_in":["0.99-4ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libclamunrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-4"}]}],"versions":["0.95.1-1","0.95.2-1","0.95.3-1","0.95.3-1~volatile1","0.96-1","0.96-2","0.96-2~volatile1","0.96.4-1","0.96.4-1~volatile1","0.98.1-1","0.98.5-1","0.99-1","0.99-2","0.99-3"]},{"source":"osv","ecosystem":"Debian:13","package":"libclamunrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-4"}]}],"versions":["0.95.1-1","0.95.2-1","0.95.3-1","0.95.3-1~volatile1","0.96-1","0.96-2","0.96-2~volatile1","0.96.4-1","0.96.4-1~volatile1","0.98.1-1","0.98.5-1","0.99-1","0.99-2","0.99-3"]},{"source":"osv","ecosystem":"Debian:14","package":"libclamunrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-4"}]}],"versions":["0.95.1-1","0.95.2-1","0.95.3-1","0.95.3-1~volatile1","0.96-1","0.96-2","0.96-2~volatile1","0.96.4-1","0.96.4-1~volatile1","0.98.1-1","0.98.5-1","0.99-1","0.99-2","0.99-3"]},{"source":"osv","ecosystem":"Debian:12","package":"unrar-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.5-1"}]}],"versions":["1:3.5.2-0.1","1:3.5.2-0.2","1:3.5.4-0.1","1:3.5.4-1","1:3.5.4-1.1","1:3.7.2-1","1:3.7.3-1","1:3.7.3-1.1","1:3.7.8-1","1:3.7.8-2","1:3.8.2-1","1:3.8.4-1","1:3.8.5-1","1:3.8.5-2","1:3.9.10-1","1:3.9.3-1","1:3.9.5-1","1:3.9.6-1","1:3.9.7-1","1:3.9.9-1","1:4.0.2-1","1:4.0.3-1","1:4.1.4-1","1:4.2.4-0.1","1:4.2.4-0.2","1:4.2.4-0.3","1:5.0.10-1","1:5.2.5-1","1:5.2.7-0.1","1:5.3.2-1","1:5.4.5-1","3.3.6-2","3.3.6-2.0.1","3.4.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"unrar-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.5-1"}]}],"versions":["1:3.5.2-0.1","1:3.5.2-0.2","1:3.5.4-0.1","1:3.5.4-1","1:3.5.4-1.1","1:3.7.2-1","1:3.7.3-1","1:3.7.3-1.1","1:3.7.8-1","1:3.7.8-2","1:3.8.2-1","1:3.8.4-1","1:3.8.5-1","1:3.8.5-2","1:3.9.10-1","1:3.9.3-1","1:3.9.5-1","1:3.9.6-1","1:3.9.7-1","1:3.9.9-1","1:4.0.2-1","1:4.0.3-1","1:4.1.4-1","1:4.2.4-0.1","1:4.2.4-0.2","1:4.2.4-0.3","1:5.0.10-1","1:5.2.5-1","1:5.2.7-0.1","1:5.3.2-1","1:5.4.5-1","3.3.6-2","3.3.6-2.0.1","3.4.3-1"]},{"source":"osv","ecosystem":"Debian:14","package":"unrar-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.5.5-1"}]}],"versions":["1:3.5.2-0.1","1:3.5.2-0.2","1:3.5.4-0.1","1:3.5.4-1","1:3.5.4-1.1","1:3.7.2-1","1:3.7.3-1","1:3.7.3-1.1","1:3.7.8-1","1:3.7.8-2","1:3.8.2-1","1:3.8.4-1","1:3.8.5-1","1:3.8.5-2","1:3.9.10-1","1:3.9.3-1","1:3.9.5-1","1:3.9.6-1","1:3.9.7-1","1:3.9.9-1","1:4.0.2-1","1:4.0.3-1","1:4.1.4-1","1:4.2.4-0.1","1:4.2.4-0.2","1:4.2.4-0.3","1:5.0.10-1","1:5.2.5-1","1:5.2.7-0.1","1:5.3.2-1","1:5.4.5-1","3.3.6-2","3.3.6-2.0.1","3.4.3-1"]},{"source":"osv","ecosystem":"Debian:7","package":"unrar-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.4-1+deb7u2"}]}],"versions":["1:3.5.2-0.1","1:3.5.2-0.2","1:3.5.4-0.1","1:3.5.4-1","1:3.5.4-1.1","1:3.7.2-1","1:3.7.3-1","1:3.7.3-1.1","1:3.7.8-1","1:3.7.8-2","1:3.8.2-1","1:3.8.4-1","1:3.8.5-1","1:3.8.5-2","1:3.9.10-1","1:3.9.3-1","1:3.9.5-1","1:3.9.6-1","1:3.9.7-1","1:3.9.9-1","1:4.0.2-1","1:4.0.3-1","1:4.1.4-1","1:4.1.4-1+deb7u1","3.3.6-2","3.3.6-2.0.1","3.4.3-1"]},{"source":"osv","ecosystem":"Debian:7","package":"libclamunrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-0+deb7u2"}]}],"versions":["0.95.1-1","0.95.2-1","0.95.3-1","0.95.3-1~volatile1","0.96-1","0.96-2","0.96-2~volatile1","0.96.4-1","0.96.4-1~volatile1","0.98.1-1","0.98.5-0+deb7u1","0.98.5-1","0.99-0+deb7u1"]},{"source":"osv","ecosystem":"Mageia:5","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-1.mga5.nonfree"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-32.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.14-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.80.2-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.80.2-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.80.2-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.80.2-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.80.2-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-0.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-0.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-0.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-0.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.2-0.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-33.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-5.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-5.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99.4-0.20.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"unrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-4.5.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libclamunrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-0ubuntu0.14.04.2"}]}],"versions":["0.96.4-1","0.96.4-1ubuntu1","0.99-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libclamunrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-1ubuntu0.1"}]}],"versions":["0.98.5-1","0.99-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"unrar-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.3.2-1+deb9u1build0.16.04.1"}]}],"versions":["1:5.3.2-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libclamunrar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.99-4ubuntu1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.103.3-1.4"}]}],"bundled":55}],"products":[{"vendor":"rarlab","product":"unrar"},{"vendor":"sophos","product":"threat_detection_engine"}],"references":[{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1286","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","advisory","evidence","report"]},{"url":"https://nakedsecurity.sophos.com/2012/11/05/tavis-ormandy-sophos/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.gentoo.org/glsa/201709-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://community.sophos.com/kb/en-us/118424#six","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.gentoo.org/glsa/201708-05","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://lock.cmpxchg8b.com/sophailv2.pdf","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://security.gentoo.org/glsa/201804-16","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10205","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://telussecuritylabs.com/threats/show/TSL20121207-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"http://securitytracker.com/id?1027725","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6706"},{"url":"https://nakedsecurity.sophos.com/2012/11/05/tavis-ormandy-sophos"},{"url":"https://github.com/advisories/GHSA-x9pf-gc5f-vghh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2012-6706","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-6706","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0302.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21134","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2017-06/msg00085.html","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2017/08/18/2","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2017/08/18/6","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171716-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040662","tags":["report"]},{"url":"https://bugzilla.suse.com/1045490","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6706","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171745-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1045315","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171760-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171763-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/815106","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180809-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1049423","tags":["report"]},{"url":"https://bugzilla.suse.com/1052449","tags":["report"]},{"url":"https://bugzilla.suse.com/1082858","tags":["report"]},{"url":"https://bugzilla.suse.com/1083915","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000085","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180862-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1046882","tags":["report"]},{"url":"https://bugzilla.suse.com/1054038","tags":["report"]},{"url":"https://bugzilla.suse.com/513804","tags":["report"]},{"url":"https://bugzilla.suse.com/693890","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12942","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180863-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212834-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187974","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-20006","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2012-6706","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2017/06/21/9","tags":["report"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1286\u0026desc=6","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6706","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-1405","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-6706","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2017-06-22T13:00:00Z","modified":"2024-08-06T21:36:02.351Z","updated_at":"2026-11-02T14:34:51.269982Z"}],"euvd":[{"id":"EUVD-2012-6548","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2017-06-22T13:00:00Z","modified":"2024-08-06T21:36:02Z","updated_at":"2026-11-03T01:56:01.964017Z"}],"ghsa":[{"id":"GHSA-x9pf-gc5f-vghh","title":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus...","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2022-05-14T02:19:49Z","modified":"2025-04-20T03:40:27Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:01:48.455381Z"}],"nvd":[{"id":"CVE-2012-6706","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2017-06-22T13:29:00.173Z","modified":"2026-06-16T23:48:38.56Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:02:17.748457Z"}],"osv":[{"id":"ALPINE-CVE-2012-6706","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2017-06-22T13:29:00.173Z","modified":"2026-11-03T06:30:04.250985108Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T06:41:39.834803Z"},{"id":"CVE-2012-6706","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2017-06-22T13:29:00Z","modified":"2026-04-16T06:16:57.478096419Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-6706","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2017-06-22T13:29:00.173Z","modified":"2026-10-23T18:02:56.325957147Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"UBUNTU-CVE-2012-6706","description":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the \"DestPos\" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].","status":"published","published":"2017-06-22T13:29:00Z","modified":"2025-09-08T16:42:59Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:06.854805Z"},{"id":"DLA-1003-1","title":"unrar-nonfree - security update","status":"published","published":"2017-06-27T00:00:00Z","modified":"2026-03-09T01:00:56.997585Z","updated_at":"2026-11-02T15:46:08.746073Z"},{"id":"DLA-1014-1","title":"libclamunrar - security update","status":"published","published":"2017-07-05T00:00:00Z","modified":"2026-03-09T01:01:00.070697Z","updated_at":"2026-11-02T15:46:08.746073Z"},{"id":"MGASA-2017-0302","title":"Updated unrar packages fix security vulnerabilities","description":"VMSF_DELTA memory corruption (CVE-2012-6706).\n\nDirectory traversal issue in UnRAR before 5.5.7 (CVE-2017-12938).\n\nlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the\nEncodeFileName::Decode call within the Archive::ReadHeader15 function\n(CVE-2017-12940).\n\nlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the\nUnpack::Unpack20 function (CVE-2017-12941).\n\nlibunrar.a in UnRAR before 5.5.7 has a buffer overflow in the\nUnpack::LongLZ function (CVE-2017-12942).\n","status":"published","published":"2017-08-24T21:18:23Z","modified":"2026-04-16T06:22:38.615123321Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10685-1","title":"clamav-0.103.3-1.4 on GA media","description":"These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:51:59.666103Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2017:1716-1","title":"Security update for clamav","description":"\nThis update for clamav fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2012-6706: Fixed an arbitrary memory write in VMSF_DELTA filter in libclamunrar (bsc#1045490)\n\nNon security issues fixed:\n\n- Provide and obsolete clamav-nodb to trigger its removal in openSUSE Leap. (bsc#1040662)\n","status":"published","published":"2017-06-29T12:51:09Z","modified":"2026-02-04T02:34:26.714424Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:1745-1","title":"Security update for unrar","description":"This update for unrar fixes the following issues:\n\n- CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. (bsc#1045315).\n","status":"published","published":"2017-06-30T13:35:47Z","modified":"2026-02-04T03:57:14.426672Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:1760-1","title":"Security update for unrar","description":"This update for unrar fixes the following issues:\n\n- CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. (bsc#1045315).\n","status":"published","published":"2017-07-03T15:17:39Z","modified":"2026-02-04T03:55:10.399319Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:1763-1","title":"Security update for clamav","description":"\nThis update for clamav fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2012-6706: Fixed an arbitrary memory write in VMSF_DELTA filter in libclamunrar (bsc#1045490)\n\nNon security issue fixed:\n\n- Fix permissions of /var/spool/amavis. (bsc#815106)\n","status":"published","published":"2017-07-03T15:17:08Z","modified":"2026-02-04T04:11:16.201864Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2018:0809-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2012-6706: VMSF_DELTA filter inside the unrar implementation allows an arbitrary memory write (bsc#1045315).\n- CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted CHM file (bsc#1052449).\n- CVE-2017-11423: A stack-based buffer over-read that can lead to a denial of service in mspack via a crafted CAB file (bsc#1049423).\n- CVE-2018-1000085: An out-of-bounds heap read vulnerability was found in XAR parser that can lead to a denial of service (bsc#1082858).\n- CVE-2018-0202: Fixed two vulnerabilities in the PDF parsing code (bsc#1083915).\n","status":"published","published":"2018-03-26T08:38:32Z","modified":"2026-02-04T03:08:59.985275Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0862-1","title":"Security update for unrar","description":"This update for unrar to version 5.6.1 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal\n  protection mechanism via vectors involving a symlink to the . directory, a\n  symlink to the .. directory, and a regular file (bsc#1054038).\n- CVE-2017-12940: Prevent out-of-bounds read in the EncodeFileName::Decode call\n  within the Archive::ReadHeader15 function (bsc#1054038).\n- CVE-2017-12941: Prevent an out-of-bounds read in the Unpack::Unpack20\n  function (bsc#1054038).\n- CVE-2017-12942: Prevent a buffer overflow in the Unpack::LongLZ function\n  (bsc#1054038).\n\nThese non-security issues were fixed:\n\n- Added extraction support for .LZ archives created by Lzip compressor\n- Enable unpacking of files in ZIP archives compressed with XZ algorithm and\n  encrypted with AES\n- Added support for PAX extended headers inside of TAR archive\n- If RAR recovery volumes (.rev files) are present in the same folder as usual\n  RAR volumes, archive test command verifies .rev contents after completing\n  testing .rar files\n- By default unrar skips symbolic links with absolute paths in link target when\n  extracting unless -ola command line switch is specified\n- Added support for AES-NI CPU instructions \n- Support for a new RAR 5.0 archiving format\n- Wildcard exclusion mask for folders\n- Added libunrar* and libunrar*-devel subpackages (bsc#513804)\n- Prevent conditional jumps depending on uninitialised values (bsc#1046882)\n","status":"published","published":"2018-04-03T15:16:58Z","modified":"2026-02-04T02:15:34.532486Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0863-1","title":"Security update for clamav","description":"This update for clamav fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2012-6706: VMSF_DELTA filter inside the unrar implementation allows an arbitrary memory write (bsc#1045315).\n- CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted CHM file (bsc#1052449).\n- CVE-2017-11423: A stack-based buffer over-read that can lead to a denial of service in mspack via a crafted CAB file (bsc#1049423).\n- CVE-2018-1000085: An out-of-bounds heap read vulnerability was found in XAR parser that can lead to a denial of service (bsc#1082858).\n- CVE-2018-0202: Fixed two vulnerabilities in the PDF parsing code (bsc#1083915).\n","status":"published","published":"2018-04-03T15:18:00Z","modified":"2026-02-04T03:31:38.390203Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2021:2834-1","title":"Security update for unrar","description":"This update for unrar to version 5.6.1 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal\n  protection mechanism via vectors involving a symlink to the . directory, a\n  symlink to the .. directory, and a regular file (bsc#1054038).\n- CVE-2017-12940: Prevent out-of-bounds read in the EncodeFileName::Decode call\n  within the Archive::ReadHeader15 function (bsc#1054038).\n- CVE-2017-12941: Prevent an out-of-bounds read in the Unpack::Unpack20\n  function (bsc#1054038).\n- CVE-2017-12942: Prevent a buffer overflow in the Unpack::LongLZ function\n  (bsc#1054038).\n- CVE-2017-20006: Fixed heap-based buffer overflow in Unpack:CopyString (bsc#1187974).\n\nThese non-security issues were fixed:\n\n- Added extraction support for .LZ archives created by Lzip compressor\n- Enable unpacking of files in ZIP archives compressed with XZ algorithm and\n  encrypted with AES\n- Added support for PAX extended headers inside of TAR archive\n- If RAR recovery volumes (.rev files) are present in the same folder as usual\n  RAR volumes, archive test command verifies .rev contents after completing\n  testing .rar files\n- By default unrar skips symbolic links with absolute paths in link target when\n  extracting unless -ola command line switch is specified\n- Added support for AES-NI CPU instructions\n- Support for a new RAR 5.0 archiving format\n- Wildcard exclusion mask for folders\n- Prevent conditional jumps depending on uninitialised values (bsc#1046882)\n","status":"published","published":"2021-08-25T10:26:54Z","modified":"2026-02-04T03:16:37.694807Z","updated_at":"2026-11-02T15:53:49.605187Z"}]}}