Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cabextract project cabextract vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2018-14681
An issue exists in kwajd_read_headers in mspack/kwajd.c in libmspack prior to 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
Cabextract Libmspack 0.6Cabextract Libmspack 0.4Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCabextract Libmspack 0.5Cabextract Libmspack 0.3Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0
8.8
CVSSv3
CVE-2018-14682
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
Cabextract Libmspack 0.6Cabextract Libmspack 0.5Cabextract Libmspack 0.4Cabextract Libmspack 0.0.20060920Cabextract Libmspack 0.3Cabextract Project CabextractDebian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3
6.5
CVSSv3
CVE-2018-18584
In mspack/cab.h in libmspack prior to 0.8alpha and cabextract prior to 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
Libmspack Project Libmspack 0.5Cabextract Project CabextractLibmspack Project Libmspack 0.4Libmspack Project Libmspack 0.3Libmspack Project Libmspack 0.6Libmspack Project Libmspack 0.7Libmspack Project Libmspack 0.7.1Debian Debian Linux 8.0Redhat Enterprise Linux 7.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Starwindsoftware Starwind Virtual San -
6.5
CVSSv3
CVE-2018-14680
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. It does not reject blank CHM filenames.
Cabextract Libmspack 0.4Cabextract Libmspack 0.3Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCabextract Libmspack 0.5Cabextract Libmspack 0.6Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 7.0
6.5
CVSSv3
CVE-2018-14679
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
Cabextract Libmspack 0.6Cabextract Libmspack 0.5Cabextract Libmspack 0.4Cabextract Libmspack 0.3Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCanonical Ubuntu Linux 14.04Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Debian Debian Linux 9.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Desktop 7.0
NA
CVE-2010-2800
The MS-ZIP decompressor in cabextract prior to 1.3 allows remote malicious users to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.
Cabextract Project Cabextract 0.4Cabextract Project Cabextract 0.2Cabextract Project CabextractCabextract Project Cabextract 1.1Cabextract Project Cabextract 1.0Cabextract Project Cabextract 0.6Cabextract Project Cabextract 0.5Cabextract Project Cabextract 0.3Cabextract Project Cabextract 0.1
NA
CVE-2010-2801
Integer signedness error in the Quantum decompressor in cabextract prior to 1.3, when archive test mode is used, allows user-assisted remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab...
Cabextract Project Cabextract 1.1Cabextract Project Cabextract 1.0Cabextract Project Cabextract 0.6Cabextract Project Cabextract 0.5Cabextract Project CabextractCabextract Project Cabextract 0.2Cabextract Project Cabextract 0.1Cabextract Project Cabextract 0.4Cabextract Project Cabextract 0.3
NA
CVE-2004-0916
Directory traversal vulnerability in cabextract prior to 1.1 allows remote malicious users to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.
Cabextract Project Cabextract 0.2Cabextract Project Cabextract 0.6Cabextract Project Cabextract 1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook