Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

libmspack project libmspack vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2018-18584
In mspack/cab.h in libmspack prior to 0.8alpha and cabextract prior to 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
Libmspack Project Libmspack 0.5Cabextract Project CabextractLibmspack Project Libmspack 0.4Libmspack Project Libmspack 0.3Libmspack Project Libmspack 0.6Libmspack Project Libmspack 0.7Libmspack Project Libmspack 0.7.1Debian Debian Linux 8.0Redhat Enterprise Linux 7.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Starwindsoftware Starwind Virtual San -
6.5
CVSSv3
CVE-2018-14679
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
Cabextract Libmspack 0.6Cabextract Libmspack 0.5Cabextract Libmspack 0.4Cabextract Libmspack 0.3Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCanonical Ubuntu Linux 14.04Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Debian Debian Linux 9.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Desktop 7.0
6.5
CVSSv3
CVE-2018-14680
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. It does not reject blank CHM filenames.
Cabextract Libmspack 0.4Cabextract Libmspack 0.3Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCabextract Libmspack 0.5Cabextract Libmspack 0.6Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 7.0
8.8
CVSSv3
CVE-2018-14681
An issue exists in kwajd_read_headers in mspack/kwajd.c in libmspack prior to 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
Cabextract Libmspack 0.6Cabextract Libmspack 0.4Cabextract Libmspack 0.0.20060920Cabextract Project CabextractCabextract Libmspack 0.5Cabextract Libmspack 0.3Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0
8.8
CVSSv3
CVE-2018-14682
An issue exists in mspack/chmd.c in libmspack prior to 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
Cabextract Libmspack 0.6Cabextract Libmspack 0.5Cabextract Libmspack 0.4Cabextract Libmspack 0.0.20060920Cabextract Libmspack 0.3Cabextract Project CabextractDebian Debian Linux 8.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Ansible Tower 3.3
NA
CVE-2014-9732
The cabd_extract function in cabd.c in libmspack prior to 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote malicious users to cause a denial of service (NULL pointer dereference and application...
Libmspack Project Libmspack
NA
CVE-2015-4467
The chmd_init_decomp function in chmd.c in libmspack prior to 0.5 does not properly validate the reset interval, which allows remote malicious users to cause a denial of service (divide-by-zero error and application crash) via a crafted CHM file.
Libmspack Project Libmspack
NA
CVE-2015-4468
Multiple integer overflows in the search_chunk function in chmd.c in libmspack prior to 0.5 allow remote malicious users to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.
Libmspack Project Libmspack
NA
CVE-2015-4469
The chmd_read_headers function in chmd.c in libmspack prior to 0.5 does not validate name lengths, which allows remote malicious users to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.
Libmspack Project Libmspack
NA
CVE-2015-4470
Off-by-one error in the inflate function in mszipd.c in libmspack prior to 0.5 allows remote malicious users to cause a denial of service (buffer over-read and application crash) via a crafted CAB archive.
Libmspack Project Libmspack
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-codedCVE-2024-27202NULL pointer dereferenceCVE-2024-28075CVE-2024-33608CVE-2024-28889CVE-2024-34572template injectionCVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook