Search for packages
Package details: pkg:alpm/archlinux/libmspack@1:0.6alpha-1
purl pkg:alpm/archlinux/libmspack@1:0.6alpha-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-8pm8-hj6d-aaaq The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file. CVE-2017-11423
VCID-q3fd-q3r3-aaas mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file. CVE-2017-6419

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:36.852064+00:00 Arch Linux Importer Fixing VCID-8pm8-hj6d-aaaq https://security.archlinux.org/AVG-603 36.0.0
2025-03-28T07:44:36.828803+00:00 Arch Linux Importer Fixing VCID-q3fd-q3r3-aaas https://security.archlinux.org/AVG-603 36.0.0
2024-09-18T01:59:40.873087+00:00 Arch Linux Importer Fixing VCID-8pm8-hj6d-aaaq https://security.archlinux.org/AVG-603 34.0.1
2024-09-18T01:59:40.849403+00:00 Arch Linux Importer Fixing VCID-q3fd-q3r3-aaas https://security.archlinux.org/AVG-603 34.0.1
2024-01-03T22:25:56.655010+00:00 Arch Linux Importer Fixing VCID-8pm8-hj6d-aaaq https://security.archlinux.org/AVG-603 34.0.0rc1
2024-01-03T22:25:56.630348+00:00 Arch Linux Importer Fixing VCID-q3fd-q3r3-aaas https://security.archlinux.org/AVG-603 34.0.0rc1