CA
Product
Cabextract
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add Cabextract to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14682 | 8.8 | Jul 28 | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha Affected: through 1.5 |
| CVE-2018-14681 | 8.8 | Jul 28 | An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha Affected: through 1.5 |
| CVE-2018-18584 | 6.5 | Oct 23 | In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds… Affected: before 1.8 |
| CVE-2018-14680 | 6.5 | Jul 28 | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha Affected: through 1.5 |
| CVE-2018-14679 | 6.5 | Jul 28 | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha Affected: through 1.5 |
| CVE-2015-2060 | 5.3 | Nov 29 | cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a… Affected: before 1.6 |
| CVE-2010-2801 | – | Aug 9 | Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service… Affected: through 1.2; 0.1; 0.2; 0.3; 0.4; 0.5; +3 more |
| CVE-2010-2800 | – | Aug 9 | The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1)… Affected: through 1.2; 0.1; 0.2; 0.3; 0.4; 0.5; +3 more |
| CVE-2004-0916 | – | Jan 27 | Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing Affected: 0.2; 0.6; 1.0 |
Showing 9