Published: 09/08/2010 Updated: 26/04/2021

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Integer signedness error in the Quantum decompressor in cabextract prior to 1.3, when archive test mode is used, allows user-assisted remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cabextract project cabextract 1.1
cabextract project cabextract 1.0
cabextract project cabextract 0.6
cabextract project cabextract 0.5
cabextract project cabextract
cabextract project cabextract 0.2
cabextract project cabextract 0.1
cabextract project cabextract 0.4
cabextract project cabextract 0.3

Debian Bug report logs - #591552 Two security issues Package: cabextract; Maintainer for cabextract is Eric Sharkey <sharkey@debianorg>; Source for cabextract is src:cabextract (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Tue, 3 Aug 2010 21:09:01 UTC Severity: grave Tags: security ...

It was discovered that a programming error in the archive test mode of cabextract, a program to extract Microsoft Cabinet files, could lead to the execution of arbitrary code For the stable distribution (lenny), this problem has been fixed in version 12-3+lenny1 For the unstable distribution (sid), this problem will be fixed soon We recommend t ...

CWE-189 http://www.vupen.com/english/advisories/2010/1997 http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113 http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118 http://www.debian.org/security/2010/dsa-2087 http://marc.info/?l=oss-security&m=128077976522470&w=2 http://www.cabextract.org.uk/#changes http://www.vupen.com/english/advisories/2010/1903 http://www.securityfocus.com/bid/42173 http://bugs.gentoo.org/show_bug.cgi?id=329891 https://bugzilla.redhat.com/show_bug.cgi?id=620454 http://marc.info/?l=oss-security&m=128076168623266&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/60891 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=591552 https://nvd.nist.gov https://www.debian.org/security/./dsa-2087

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-2801

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect