Fedora Update for cabextract FEDORA-2015-2746

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: cabextract-1.5-1.fc20

cabextract is a program which can extract files from cabinet .cab archives...

[SECURITY] Fedora 21 Update: cabextract-1.5-1.fc21

cabextract is a program which can extract files from cabinet .cab archives...

Updated cabextract packages fix CVE-2015-2060

A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...

MGASA-2015-0086 Updated cabextract packages fix CVE-2015-2060

A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...

cabextract -- directory traversal with UTF-8 symbols in filenames

Cabextract ChangeLog reports: It was possible for cabinet files to extract to absolute file locations, and it was possible on Cygwin to get around cabextract's absolute and relative path protections by using backslashes...

libmspack / cabextract DoS

Infinite loop on extraction...

[ MDVSA-2015:041 ] cabextract

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:041 http://www.mandriva.com/en/support/security/ Package : cabextract Date : February 10, 2015 Affected: Business Server 1.0 Problem Description: Updated cabextract packages fix security vulnerability:...

Mandriva Linux Security Advisory : cabextract (MDVSA-2015:041)

Updated cabextract packages fix security vulnerability : Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

MGASA-2015-0052 Updated cabextract packages fix CVE-2014-9556

Updated cabextract packages fix security vulnerability: Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

Updated cabextract packages fix CVE-2014-9556

Updated cabextract packages fix security vulnerability: Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

libmspack -- frame_end overflow which could cause infinite loop

There is a denial of service vulnerability in libmspack. The libmspack code is built into cabextract, so it is also vulnerable. MITRE reports: Integer overflow in the qtmddecompress function in libmspack 0.4 allows remote attackers to cause a denial of service hang via a crafted CAB file, which...

SuSE 11.3 Security Update : cabextract (SAT Patch Number 9437)

cabextract was updated to fix two security issues : - A potential endless loop in decoding files. CVE-2010-2800 - Memory corruption due to integer overflows in buffer read handling. CVE-2010-2801 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

GLSA-201312-09 : cabextract: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-09 cabextract: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cabextract. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...

cabextract: Multiple vulnerabilities

Background cabextract is free software for extracting Microsoft cabinet files. Description Multiple vulnerabilities have been discovered in cabextract. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially-crafted archive ...

Fedora Update for cabextract FEDORA-2010-14135

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cabextract FEDORA-2010-14135

Check for the Version of cabextract OpenVAS Vulnerability Test Fedora Update for cabextract FEDORA-2010-14135 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora 12 : cabextract-1.3-1.fc12 / libmspack-0.2-0.1.20100723alpha.fc12 (2010-14634)

The remote Fedora host is missing one or more security updates : cabextract-1.3-1.fc12 : - Mon Sep 13 2010 Dan Horak - 1.3-1 - updated to 1.3 - built with system copy of libmspack CVE-2010-2800 CVE-2010-2801 libmspack-0.2-0.1.20100723alpha.fc12 : - Mon Aug 30 2010 Dan Horak - 0.2-0.1.20100723alph...

Fedora 14 : cabextract-1.3-1.fc14 / libmspack-0.2-0.1.20100723alpha.fc14 (2010-14135)

Bug 620450 - CVE-2010-2800 cabextract: Infinite loop in MS-ZIP and Quantum decoders - Bug 620454 - CVE-2010-2801 cabextract: Integer wrap-around crash by processing certain .cab files in test archive mode Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 13 : cabextract-1.3-1.fc13 / libmspack-0.2-0.1.20100723alpha.fc13 (2010-14722)

The remote Fedora host is missing one or more security updates : cabextract-1.3-1.fc13 : - Mon Sep 13 2010 Dan Horak - 1.3-1 - updated to 1.3 - built with system copy of libmspack CVE-2010-2800 CVE-2010-2801 libmspack-0.2-0.1.20100723alpha.fc13 : - Mon Aug 30 2010 Dan Horak - 0.2-0.1.20100723alph...