cve/2018/CVE-2018-10115.md

CVE-2018-10115

Description

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/gipi/cve-cemetery
• https://github.com/litneet64/containerized-bomb-disposal
• https://github.com/lnick2023/nicenice
• https://github.com/microfocus-idol/7zip
• https://github.com/opentext-idol/7zip
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/xbl3/awesome-cve-poc_qazbnm456