Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f9hg-4282-x667

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

EPSS

Процентиль: 94%
0.07164
Низкий

Связанные уязвимости

ubuntu
около 11 лет назад

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

nvd
около 11 лет назад

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

debian
около 11 лет назад

The cabd_extract function in cabd.c in libmspack before 0.5 does not p ...

suse-cvrf
почти 11 лет назад

Security update for cabextract

suse-cvrf
больше 10 лет назад

Security update for libmspack

EPSS

Процентиль: 94%
0.07164
Низкий