Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f9hg-4282-x667

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

EPSS

Процентиль: 60%
0.004
Низкий

Связанные уязвимости

ubuntu
больше 10 лет назад

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

nvd
больше 10 лет назад

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

debian
больше 10 лет назад

The cabd_extract function in cabd.c in libmspack before 0.5 does not p ...

suse-cvrf
около 10 лет назад

Security update for cabextract

suse-cvrf
около 10 лет назад

Security update for libmspack

EPSS

Процентиль: 60%
0.004
Низкий