6 results · Feed
-
Unscored —
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers …
-
Unscored —
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too smal…
-
Unscored —
Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service …
-
Unscored —
Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows u…
-
Unscored —
The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) v…
-
Unscored —
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a c…