Cabextract

Libmspack

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2018-14679

  • EPSS 0.93%
  • Published 28.07.2018 23:29:00
  • Last modified 21.11.2024 03:49:34

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

6.5

CVE-2018-14680

  • EPSS 1.04%
  • Published 28.07.2018 23:29:00
  • Last modified 21.11.2024 03:49:34

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.

8.8

CVE-2018-14681

  • EPSS 1.34%
  • Published 28.07.2018 23:29:00
  • Last modified 21.11.2024 03:49:34

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.

8.8

CVE-2018-14682

  • EPSS 1.34%
  • Published 28.07.2018 23:29:00
  • Last modified 21.11.2024 03:49:34

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.