Описание
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | uses system libmspack |
| cosmic | not-affected | uses system libmspack |
| devel | not-affected | uses system libmspack |
| esm-infra-legacy/trusty | not-affected | code not compiled |
| esm-infra/bionic | not-affected | uses system libmspack |
| esm-infra/xenial | not-affected | uses system libmspack |
| precise/esm | not-affected | code not compiled |
| trusty | not-affected | code not compiled |
| trusty/esm | not-affected | code not compiled |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | code not compiled |
| cosmic | not-affected | code not compiled |
| devel | not-affected | code not compiled |
| esm-infra-legacy/trusty | not-affected | code not compiled |
| esm-infra/bionic | not-affected | code not compiled |
| esm-infra/xenial | not-affected | code not compiled |
| precise/esm | DNE | |
| trusty | not-affected | code not compiled |
| trusty/esm | not-affected | code not compiled |
| upstream | needs-triage |
Показывать по
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application
chmextract.c in the chmextract sample program, as distributed with lib ...
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3