CVE:CVE-2007-1457
CNNVD:CNNVD-200703-388
Christian Scheurer UniquE RAR File Library (unrarlib,又称URARFileLib) 0.4版本的urarlib_get函数中存在缓冲区溢出漏洞。见机行事的攻击者可以借助一个长的文件名、rar文件或lib密码自变量，执行任意代码。
solution:Upgrade christian_scheurer unrarlib to a higher version than 0.4,and avoid the version 0.4; Upgrade christian_scheurer urarfilelib to a higher version than 0.4,and avoid the version 0.4