Skip to content
OpenAdvisories

Package · Debian

libmspack

20 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window

    libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that allows attackers to leak heap data via unchecked back-reference distances. Attackers can supply a crafted MS-ZIP CAB file whose first block b…