CVE-2018-18584

CVE-2018-18584 affects libmspack and cabextract. In mspack/cab.h, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write (before 0.8alpha for libmspack and before 1.8 for cabextract). Remediation involves upgrading to fixed versions (e.g....

CVE-2015-4472

CVE-2015-4472 is a vulnerability in libmspack prior to 0.5 where an off-by-one error in the READ_ENCINT macro (in chmd.c) can be triggered by a crafted CHM file, potentially causing a denial of service (application crash) and possibly other impact. It affects libmspack’s CHM/CAB handling and is d...