{"action":"Upgrade unrar-nonfree to 1:5.5.5-1 or later.","affected":[{"fixed":"1:5.5.5-1","introduced":"0"}],"component":"unrar-nonfree","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1:5.5.5-1"],"id":"tcs_01M5NA7YHT69EQGGRGPQXKKPRA","modified_at":"2026-10-23T18:02:56.325957147Z","published_at":"2017-06-22T13:29:00.173Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2012-6706","https://security-tracker.debian.org/tracker/CVE-2012-6706"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2012-6706#Debian:13/unrar-nonfree","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2012-6706"}],"summary":"A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. A"}