Libmspack Project Libmspack vulnerabilities

• cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 more In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input... CVE-2018-18584 Fix available 6.5 MediumOctober 22, 2018
• libmspack project libmspack mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a... CVE-2017-6419 Fix available 7.8 HighAugust 6, 2017
• libmspack project libmspack The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2... CVE-2017-11423 Fix available 5.5 MediumJuly 18, 2017
• libmspack project libmspack Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote... CVE-2015-4472 Fix available 6.8 MediumJune 11, 2015
• libmspack project libmspack Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote... CVE-2015-4471 Fix available 4.3 MediumJune 11, 2015
• libmspack project libmspack Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote... CVE-2015-4470 Fix available 4.3 MediumJune 11, 2015
• libmspack project libmspack The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths,... CVE-2015-4469 Fix available 4.3 MediumJune 11, 2015
• libmspack project libmspack Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow... CVE-2015-4468 Fix available 4.3 MediumJune 11, 2015
• libmspack project libmspack The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the... CVE-2015-4467 Fix available 4.3 MediumJune 11, 2015
• libmspack project libmspack The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain... CVE-2014-9732 Fix available 4.3 MediumJune 11, 2015
• libmspack project libmspack Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to... CVE-2014-9556 Fix available 5.0 MediumJanuary 30, 2015