Download
| Alert*
CVE-2017-11124
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c. CVE-2017-11125 libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c. CVE-2010-3798 Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted xar archive. |