SUSE: Security Advisory (SUSE-SU-2015:0508-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:0366-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED11 Security Update : cabextract (SUSE-SU-2015:2131-1)

This security update fixes the following issues : - Fix possible infinite loop caused DoS bsc919283, CVE-2014-9556 - Fix zero dereference bsc934524, CVE-2014-9732 - Fix off by one bsc934527, CVE-2015-4470 - Fix buffer under-read crash bsc934528, CVE-2015-4471 Note that Tenable Network Security ha...

[ MDVSA-2015:064 ] cabextract

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:064 http://www.mandriva.com/en/support/security/ Package : cabextract Date : March 27, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Updated cabextract packages fix security...

Fedora 21 : libmspack-0.5-0.1.alpha.fc21 (2015-3249)

updated to bugfix release 0.5alpha Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

SuSE 11.3 Security Update : libmspack (SAT Patch Number 10402)

This update fixes the following security issue : - An integer overflow in the function qtmddecompress could have been exploited causing a denial of service endless loop bnc912214. CVE-2014-9556 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Fedora Update for libmspack FEDORA-2015-3249

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libmspack (openSUSE-2015-208)

This update fixes previous security update, which was not considered as complete. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-208. The text description of this plugin is C SU...

[ MDVSA-2015:041 ] cabextract

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:041 http://www.mandriva.com/en/support/security/ Package : cabextract Date : February 10, 2015 Affected: Business Server 1.0 Problem Description: Updated cabextract packages fix security vulnerability:...

Mandriva Linux Security Advisory : cabextract (MDVSA-2015:041)

Updated cabextract packages fix security vulnerability : Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any...

CVE-2014-9556

Integer overflow in the qtmddecompress function in libmspack 0.4 allows remote attackers to cause a denial of service hang via a crafted CAB file, which triggers an infinite loop...

CVE-2014-9556

CVE-2014-9556 affects libmspack 0.4 with an integer overflow in qtmd_decompress that can be triggered by a crafted CAB file, causing a remote denial of service via an infinite loop. Connected advisories indicate the issue is addressed by updates in downstream packages (e.g., cabextract/libmspack)...

openSUSE Security Update : libmspack (openSUSE-SU-2015:0187-1)

libmspack was updated to fix a possible infinite loop caused DoS bnc912214, CVE-2014-9556. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-87. The text description of this plugin...