{"id":"CVE-2014-9556","aliases":["DEBIAN-CVE-2014-9556","EUVD-2014-9370","GHSA-9768-cv3h-4v3f","MGASA-2015-0052","SUSE-SU-2015:0366-1","SUSE-SU-2015:0506-1","SUSE-SU-2015:0508-1","SUSE-SU-2015:2131-1","UBUNTU-CVE-2014-9556","openSUSE-SU-2024:10365-1"],"status":"published","title":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to...","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02817,"percentile":0.86651,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2015-01-30T13:57:38Z","modified":"2026-10-23T15:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"cabextract","fixed_in":["1.4-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cabextract","fixed_in":["1.4-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cabextract","fixed_in":["1.4-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libmspack","fixed_in":["0.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libmspack","fixed_in":["0.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libmspack","fixed_in":["0.4-2"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"cabextract","fixed_in":["1.5-1.mga4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libmspack","fixed_in":["0.4-6.1","0.4-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libmspack","fixed_in":["0.4-6.1","0.4-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"libmspack","fixed_in":["0.4-6.1","0.4-10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libmspack","fixed_in":["0.4-6.1","0.4-10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cabextract","fixed_in":["1.4-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libmspack","fixed_in":["0.4-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cabextract","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cabextract","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cabextract","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-2"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"cabextract","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-1.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"cabextract","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-2.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"cabextract","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-2.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cabextract","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-4ubuntu0.1~esm1"}]}],"versions":["1.4-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libmspack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-1ubuntu0.1~esm1"}]}],"versions":["0.4-1"]}],"products":[{"vendor":"libmspack_project","product":"libmspack"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2015/01/01/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773041","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://secunia.com/advisories/62793","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://advisories.mageia.org/MGASA-2015-0052.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/07/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:041","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9556"},{"url":"https://github.com/advisories/GHSA-9768-cv3h-4v3f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-9556","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0052.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15193","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150366-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/912214","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9556","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150506-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150508-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152131-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/934524","tags":["report"]},{"url":"https://bugzilla.suse.com/934527","tags":["report"]},{"url":"https://bugzilla.suse.com/934528","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4471","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-9556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9556","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2801","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-9556","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","status":"published","published":"2015-02-03T16:00:00Z","modified":"2024-08-06T13:47:41.409Z","updated_at":"2026-11-02T14:33:42.882687Z"}],"euvd":[{"id":"EUVD-2014-9370","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","status":"published","published":"2015-02-03T16:00:00Z","modified":"2024-08-06T13:47:41Z","updated_at":"2026-11-03T01:56:48.88782Z"}],"ghsa":[{"id":"GHSA-9768-cv3h-4v3f","title":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to...","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","status":"published","published":"2022-05-14T02:05:56Z","modified":"2023-02-02T05:05:07Z","updated_at":"2026-11-02T14:52:01.981409Z"}],"nvd":[{"id":"CVE-2014-9556","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","status":"published","published":"2015-02-03T16:59:05.063Z","modified":"2026-06-17T00:18:32.85Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"CVE-2014-9556","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","status":"published","published":"2015-02-03T16:59:05Z","modified":"2026-04-16T06:21:21.403308406Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-9556","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","status":"published","published":"2015-02-03T16:59:05.063Z","modified":"2026-10-23T15:47:28.930316232Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"MGASA-2015-0052","title":"Updated cabextract packages fix CVE-2014-9556","description":"Updated cabextract packages fix security vulnerability:\n\nLibmspack, a library to provide compression and decompression of some file\nformats used by Microsoft, is embedded in cabextract. A specially crafted cab\nfile can cause cabextract to hang forever. If cabextract is exposed to any\nremotely-controlled user input, this issue can cause a denial-of-service\n(CVE-2014-9556).\n","status":"published","published":"2015-02-05T22:26:07Z","modified":"2026-04-16T06:22:32.94203064Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10365-1","title":"libmspack-devel-0.5-2.8 on GA media","description":"These are all security issues fixed in the libmspack-devel-0.5-2.8 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:48.839799Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2015:0366-1","title":"Security update for libmspack","description":"libmspack was updated to fix one security issue.\n\nThis security issue was fixed:\n- Possible DoS by infinite loop (bnc#912214, CVE-2014-9556)\n  ","status":"published","published":"2015-01-30T13:57:38Z","modified":"2026-02-04T03:20:25.490107Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0506-1","title":"Security update for libmspack","description":"\nlibmspack was updated to fix one security issue.\n\nThis security issue was fixed:\n- Possible DoS by infinite loop (bnc#912214, CVE-2014-9556)\n\nThe previous fix was not fully fixing this problem.\n","status":"published","published":"2015-03-02T14:50:59Z","modified":"2025-05-02T04:04:13.214721Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0508-1","title":"Security update for libmspack","description":"\nThis update fixes the following security issue:\n\n    * CVE-2014-9556: An integer overflow in the function qtmd_decompress()\n      could have been exploited causing a denial of service (endless loop)\n      (bnc##912214)\n\nSecurity Issues:\n\n    * CVE-2014-9556\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9556\u003e\n\n","status":"published","published":"2015-03-05T09:32:07Z","modified":"2026-02-04T02:16:17.727338Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:2131-1","title":"Security update for cabextract","description":"\nThis security update fixes the following issues:\n\n- Fix possible infinite loop caused DoS (bsc919283, CVE-2014-9556)\n- Fix zero dereference (bsc#934524, CVE-2014-9732)\n- Fix off by one (bsc#934527, CVE-2015-4470)\n- Fix buffer under-read crash (bsc#934528, CVE-2015-4471)\n","status":"published","published":"2015-11-27T12:48:15Z","modified":"2026-02-04T02:55:19.145312Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-9556","description":"Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","status":"published","published":"2015-02-03T16:59:00Z","modified":"2026-04-22T09:55:53.072716Z","updated_at":"2026-11-02T15:54:09.378953Z"}]}}