Search for packages
| purl | pkg:deb/debian/cabextract@1.4-5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-wmcy-fbqv-jyad
Aliases: CVE-2015-2060 |
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-35vw-agja-w7du | Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop. |
CVE-2014-9556
|
| VCID-gc7q-6qf2-73dw | Multiple vulnerabilities have been found in cabextract and libmspack, the worst of which could result in a Denial of Service. |
CVE-2018-18584
|