Code injection

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

CVE-2010-2800

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

Integer overflow

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

CVE-2010-2800

The CVE-2010-2800 entry concerns cabextract (libmspack) with a vulnerability in the MS-ZIP decompressor. The issue allows a remote attacker to trigger a denial-of-service (infinite loop) when processing a malformed MSZIP archive inside a .cab file, during either test or extract actions. The descr...

CVE-2010-2800

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

CVE-2010-2800

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

CVE-2010-2801

CVE-2010-2801 (cabextract, related libmspack/Quantum decompressor) suffers an integer signedness error in the Quantum decompressor when testing archives, potentially enabling a remote attacker to cause a crash or execute arbitrary code via a crafted .cab file. Affected versions are cabextract pri...

[SECURITY] [DSA 2087-1] New cabextract packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2087-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 04, 2010 http://www.debian.org/security/faq -...

cabextract code execution

No description provided...

Debian DSA-2087-1 : cabextract - programming error

It was discovered that a programming error in the archive test mode of cabextract, a program to extract Microsoft Cabinet files, could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

[SECURITY] [DSA 2087-1] New cabextract packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2087-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 04, 2010 http://www.debian.org/security/faq -...

DSA-2087-1 cabextract - arbitrary code execution

Bulletin has no description...

libmspack -- infinite loop denial of service

There is a denial of service vulnerability in libmspack. The libmspack code is built into cabextract, so it is also vulnerable. Secunia reports: The vulnerability is caused due to an error when copying data from an uncompressed block block type 0 and can be exploited to trigger an infinite loop b...

FreeBSD : cabextract -- insecure directory handling (61480a9a-22b2-11d9-814e-0001020eed82)

cabextract has insufficient checks for file names that contain ../. This can cause files to be extracted to the parent directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

FreeBSD Ports: cabextract

The remote host is missing an update to the system as announced in the referenced advisory. VID 61480a9a-22b2-11d9-814e-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: cabextract

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 574-1 (cabextract)

The remote host is missing an update to cabextract announced via advisory DSA 574-1. OpenVAS Vulnerability Test $Id: deb5741.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 574-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...