Summary
Jakub Wilk discovered that libmspack did not correctly handle certain
integer operations and bounds checking. A remote attacker could possibly
use this issue to cause a denial of service. (CVE-2015-4467, CVE-2015-4468,
CVE-2015-4469, CVE-2015-4472)
It was discovered that libmspack incorrectly handled certain malformed CAB
files. A remote attacker could use this issue to cause libmspack to crash,
resulting in a denial of service. (CVE-2017-11423)
It was discovered that libmspack incorrectly handled certain malformed CHM
files. A remote attacker could use this issue to cause libmspack to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2017-6419)
Hanno Böck discovered that libmspack incorrectly handled certain CHM files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-14679, CVE-2018-14680)
Jakub Wilk discovered that libmspack incorrectly handled certain KWAJ
files. An attacker could possibly use this issue to execute arbitrary code.
(CVE-2018-14681)
Dmitry Glavatskikh discovered that libmspack incorrectly handled certain
CHM files. An attacker could possibly use this issue to execute arbitrary
code. (CVE-2018-14682)
It was discovered libmspack incorrectly handled certain malformed CAB
files. A remote attacker could use this issue to cause libmspack to crash,
resulting in a denial of service. (CVE-2018-18585)
It was discovered that libmspack incorrectly handled certain CHM files. A
remote attacker could possibly use this issue to access sensitive
information. (CVE-2019-1010305)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libmspack | 0.4-1ubuntu0.1~esm2 |
Vulnerabilities 12
-
Unscored —
The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which al…
-
Unscored —
Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cau…
-
Unscored —
The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote at…
-
Unscored —
Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial o…
-
Unscored —
The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allo…
-
Unscored —
mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (he…
-
Unscored —
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMG…
-
Unscored —
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
-
Unscored —
An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header exte…
-
Unscored —
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() ma…
-
Unscored —
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second…
-
Unscored —
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function…
References
-
report
https://ubuntu.com/security/CVE-2015-4467
-
report
https://ubuntu.com/security/CVE-2015-4468
-
report
https://ubuntu.com/security/CVE-2015-4469
-
report
https://ubuntu.com/security/CVE-2015-4472
-
report
https://ubuntu.com/security/CVE-2017-6419
-
report
https://ubuntu.com/security/CVE-2017-11423
-
report
https://ubuntu.com/security/CVE-2018-14679
-
report
https://ubuntu.com/security/CVE-2018-14680
-
report
https://ubuntu.com/security/CVE-2018-14681
-
report
https://ubuntu.com/security/CVE-2018-14682
-
report
https://ubuntu.com/security/CVE-2018-18585
-
report
https://ubuntu.com/security/CVE-2019-1010305