CA
Product
Cabextract
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add Cabextract to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18584 | 6.5 | Oct 23 | In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds… Affected: before 1.8 |
| CVE-2018-14680 | 6.5 | Jul 28 | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha Affected: through 1.5 |
| CVE-2018-14679 | 6.5 | Jul 28 | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha Affected: through 1.5 |
| CVE-2015-2060 | 5.3 | Nov 29 | cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a… Affected: before 1.6 |
Showing 4
