CVE-2012-6706

CVE-2012-6706 describes a critical memory corruption vulnerability (VMSF_DELTA) in UnRAR versions prior to 5.5.5, including its use in Sophos Anti-Virus Threat Detection Engine before 3.37.2. This flaw, caused by an integer overflow, allows an attacker to write out of bounds, potentially leading to arbitrary code execution. With a CVSS score of 9.8, it is easily exploitable over a network with no user interaction, resulting in complete compromise of confidentiality, integrity, and availability. While highly severe, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.