Fedora 20 : cabextract-1.5-1.fc20 (2015-2730)

Security fix for directory traversal with UTF-8 symbols in filenames. Fixed in upstream version 1.5. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 20 Update: cabextract-1.5-1.fc20

cabextract is a program which can extract files from cabinet .cab archives...

[SECURITY] Fedora 21 Update: cabextract-1.5-1.fc21

cabextract is a program which can extract files from cabinet .cab archives...

Updated cabextract packages fix CVE-2015-2060

A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...

MGASA-2015-0086 Updated cabextract packages fix CVE-2015-2060

A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner CVE-2015-2060...

cabextract -- directory traversal with UTF-8 symbols in filenames

Cabextract ChangeLog reports: It was possible for cabinet files to extract to absolute file locations, and it was possible on Cygwin to get around cabextract's absolute and relative path protections by using backslashes...

[ MDVSA-2015:041 ] cabextract

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:041 http://www.mandriva.com/en/support/security/ Package : cabextract Date : February 10, 2015 Affected: Business Server 1.0 Problem Description: Updated cabextract packages fix security vulnerability:...

libmspack / cabextract DoS

Infinite loop on extraction...

Mandriva Linux Security Advisory : cabextract (MDVSA-2015:041)

Updated cabextract packages fix security vulnerability : Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

Updated cabextract packages fix CVE-2014-9556

Updated cabextract packages fix security vulnerability: Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

MGASA-2015-0052 Updated cabextract packages fix CVE-2014-9556

Updated cabextract packages fix security vulnerability: Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

libmspack -- frame_end overflow which could cause infinite loop

There is a denial of service vulnerability in libmspack. The libmspack code is built into cabextract, so it is also vulnerable. MITRE reports: Integer overflow in the qtmddecompress function in libmspack 0.4 allows remote attackers to cause a denial of service hang via a crafted CAB file, which...

SuSE 11.3 Security Update : cabextract (SAT Patch Number 9437)

cabextract was updated to fix two security issues : - A potential endless loop in decoding files. CVE-2010-2800 - Memory corruption due to integer overflows in buffer read handling. CVE-2010-2801 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

GLSA-201312-09 : cabextract: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-09 cabextract: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cabextract. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...

cabextract: Multiple vulnerabilities

Background cabextract is free software for extracting Microsoft cabinet files. Description Multiple vulnerabilities have been discovered in cabextract. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially-crafted archive ...

Fedora Update for cabextract FEDORA-2010-14135

Check for the Version of cabextract OpenVAS Vulnerability Test Fedora Update for cabextract FEDORA-2010-14135 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for cabextract FEDORA-2010-14135

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : cabextract-1.3-1.fc13 / libmspack-0.2-0.1.20100723alpha.fc13 (2010-14722)

The remote Fedora host is missing one or more security updates : cabextract-1.3-1.fc13 : - Mon Sep 13 2010 Dan Horak - 1.3-1 - updated to 1.3 - built with system copy of libmspack CVE-2010-2800 CVE-2010-2801 libmspack-0.2-0.1.20100723alpha.fc13 : - Mon Aug 30 2010 Dan Horak - 0.2-0.1.20100723alph...

Fedora 14 : cabextract-1.3-1.fc14 / libmspack-0.2-0.1.20100723alpha.fc14 (2010-14135)

Bug 620450 - CVE-2010-2800 cabextract: Infinite loop in MS-ZIP and Quantum decoders - Bug 620454 - CVE-2010-2801 cabextract: Integer wrap-around crash by processing certain .cab files in test archive mode Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 12 : cabextract-1.3-1.fc12 / libmspack-0.2-0.1.20100723alpha.fc12 (2010-14634)

The remote Fedora host is missing one or more security updates : cabextract-1.3-1.fc12 : - Mon Sep 13 2010 Dan Horak - 1.3-1 - updated to 1.3 - built with system copy of libmspack CVE-2010-2800 CVE-2010-2801 libmspack-0.2-0.1.20100723alpha.fc12 : - Mon Aug 30 2010 Dan Horak - 0.2-0.1.20100723alph...