CVE-2018-5345

CVE-2018-5345 describes a stack-based buffer overflow in GNOME gcab up to version 0.7.4, exploitable via malformed .cab files to crash or potentially execute arbitrary code. Connected advisories document that fixes were released in various distributions (e.g., gcab updates in Fedora 26 and Red Ha...

CVE-2015-0552

The CVE-2015-0552 issue affects the gcab project (gcab 0.4) via the function gcab_folder_extract in libgcab/gcab-folder.c, enabling a directory traversal that allows remote attackers to write to arbitrary files in a crafted CAB file (example path). The root cause is a path handling flaw in direct...