Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cabextract libmspack 0.0.20060920 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2018-14681
An issue exists in kwajd_read_headers in mspack/kwajd.c in libmspack prior to 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
Cabextract Libmspack 0.6Cabextract Libmspack 0.4Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCabextract Libmspack 0.5Cabextract Libmspack 0.3Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0
8.8
CVSSv3
CVE-2018-14682
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
Cabextract Libmspack 0.6Cabextract Libmspack 0.5Cabextract Libmspack 0.4Cabextract Libmspack 0.0.20060920Cabextract Libmspack 0.3Cabextract Project CabextractDebian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3
6.5
CVSSv3
CVE-2018-14680
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. It does not reject blank CHM filenames.
Cabextract Libmspack 0.4Cabextract Libmspack 0.3Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCabextract Libmspack 0.5Cabextract Libmspack 0.6Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 7.0
6.5
CVSSv3
CVE-2018-14679
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
Cabextract Libmspack 0.6Cabextract Libmspack 0.5Cabextract Libmspack 0.4Cabextract Libmspack 0.3Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCanonical Ubuntu Linux 14.04Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Debian Debian Linux 9.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Desktop 7.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook