CPE Details
libmspack Project libmspack 0.5 Alpha
0.5
2019-03-28
14h16 +00:00
14h16 +00:00
2021-04-26
09h38 +00:00
09h38 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:libmspack_project:libmspack:0.5:alpha:*:*:*:*:*:*
Informations
Vendor
libmspack_projectProduct
libmspackVersion
0.5Update
alphaRelated CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write. | 6.5 |
Moyen |
||
| mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file. | 7.8 |
Haute |
||
| The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file. | 5.5 |
Moyen |
