2 matches found
DEBIAN-CVE-2018-18584
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write...
PT-2018-2693 · None +5 · Libmspack +6
Name of the Vulnerable Software and Affected Versions: libmspack versions prior to 0.8alpha cabextract versions prior to 1.8 Description: The issue is related to an out-of-bounds write in the CAB block input buffer, which can be exploited by a remote attacker to execute arbitrary code or cause a...