Описание
Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libmspack | fixed | 0.4-2 | package | |
| cabextract | fixed | 1.4-5 | package | |
| cabextract | no-dsa | wheezy | package | |
| cabextract | no-dsa | squeeze | package |
Примечания
Starting with 1.4-5 cabextract uses the mspack system library
EPSS
Процентиль: 86%
0.02817
Низкий
Связанные уязвимости
ubuntu
больше 11 лет назад
Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
nvd
больше 11 лет назад
Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
EPSS
Процентиль: 86%
0.02817
Низкий