Search for vulnerabilities
Vulnerability details: VCID-4p44-7jvz-aaad
Vulnerability ID VCID-4p44-7jvz-aaad
Aliases CVE-2010-2801
Summary Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.
Status Published
Exploitability 0.5
Weighted Severity 4.6
Risk 2.3
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-189 Numeric Errors
System Score Found at
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.06801 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11044 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11044 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11044 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
epss 0.11718 https://api.first.org/data/v1/epss?cve=CVE-2010-2801
cvssv2 5.1 https://nvd.nist.gov/vuln/detail/CVE-2010-2801
Reference id Reference type URL
http://bugs.gentoo.org/show_bug.cgi?id=329891
http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113
http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118
http://marc.info/?l=oss-security&m=128076168623266&w=2
http://marc.info/?l=oss-security&m=128077976522470&w=2
https://api.first.org/data/v1/epss?cve=CVE-2010-2801
https://bugzilla.redhat.com/show_bug.cgi?id=620454
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2801
https://exchange.xforce.ibmcloud.com/vulnerabilities/60891
http://www.cabextract.org.uk/#changes
http://www.debian.org/security/2010/dsa-2087
http://www.securityfocus.com/bid/42173
http://www.vupen.com/english/advisories/2010/1903
http://www.vupen.com/english/advisories/2010/1997
591552 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=591552
cpe:2.3:a:cabextract_project:cabextract:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:*:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:0.1:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:0.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:0.2:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:0.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:0.3:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:0.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:0.4:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:0.5:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:0.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:0.6:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:1.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:1.0:*:*:*:*:*:*:*
cpe:2.3:a:cabextract_project:cabextract:1.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cabextract_project:cabextract:1.1:*:*:*:*:*:*:*
CVE-2010-2801 https://nvd.nist.gov/vuln/detail/CVE-2010-2801
GLSA-201312-09 https://security.gentoo.org/glsa/201312-09
No exploits are available.
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2010-2801
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.88675
EPSS Score 0.04956
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.