[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd79ndoFpCE6EnWNxymVNCIWkmRcMxerCzOrWbssPodg":3,"g5a-risk:CVE-2018-10115":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":15,"epssTimeSeries":42,"severity":44,"affectedProducts":45,"affectedProductsCount":50,"references":51,"referencesCount":72,"weaknesses":73,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":15,"otxData":15,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":126,"notableEvents":127},"CVE-2018-10115","What is CVE-2018-10115?","Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.","Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause...","2018-05-02T21:29:00.26","2020-08-24T17:37:01.14",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",1.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":36,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":36,"Authentication":24,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NETWORK","MEDIUM","PARTIAL",6.8,8.6,6.4,0.04545,[43,41,41,41,41,41,41],0.04525,"High",[46],{"vendor":47,"product":47,"version":48,"criteria":49,"vulnerable":4},"7-zip","*","cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*",1,[52,58,62,67],{"url":53,"source":54,"tags":55},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104132","Securityfocus",[56,57],"Third Party Advisory","VDB Entry",{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1040832","Securitytracker",[56,57],{"url":63,"source":64,"tags":65},"https:\u002F\u002Flandave.io\u002F2018\u002F05\u002F7-zip-from-uninitialized-memory-to-remote-code-execution\u002F","Landave",[66,56],"Exploit",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fsourceforge.net\u002Fp\u002Fsevenzip\u002Fdiscussion\u002F45797\u002Fthread\u002Fadc65bfa\u002F","Sourceforge",[71],"Issue Tracking",4,[74,82],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-665","Improper Initialization","The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.","This can have security implications when the associated resource is expected to have certain properties or values, such as a variable that determines whether a user has been authenticated or not.","Draft","Class","Simple",{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":81},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Incomplete","Base",2,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2018-10115? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-10115, a high severity cyber security vulnerability from 2018. Incorrect initialization logic of RAR decoder objects in 7-...","CVE-2018-10115, CVE-2018-10115 vulnerability, CVE-2018-10115 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, 7-zip security, 7-zip vulnerability","\u002Fwhat-is\u002Fcve-2018-10115",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-10115","Cybersecurity","CVE-2018-10115, CVE-2018-10115 vulnerability, CVE-2018-10115 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":15,"Negate":15,"Nodes":119},[120],{"Operator":121,"Negate":15,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":124,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":125},"3AF02897-9615-4FEA-A2FF-9244F82D398A","18.03",[],[],{"lastModified":11,"cacheTime":129,"version":33},1793217043112,{"score":131,"band":132,"action":133,"scoredAt":134},49,"Medium","Plan remediation","2026-10-28T06:43:57.307977+00:00"]