UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).
{
"cpe": [
"cpe:2.3:a:rarlab:unrar:5.6.1.2:*:*:*:*:*:*:*",
"cpe:2.3:a:rarlab:unrar:5.6.1.3:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "5.6.1.2"
},
{
"last_affected": "5.6.1.3"
}
],
"source": "CPE_FIELD"
}