FILE-OTHER 7-Zip crafted RAR solid compression memory corruption attempt

Description

Detects an archive exploiting CVE-2018-10115, memory corruption in 7-Zip's RAR handling that can allow code execution. The rule matches the crafted solid compression structures that public exploits use to corrupt the extractor's memory.

CVEs

References

• nvd.nist.gov →