Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43745
HistoryOct 11, 2023 - 6:02 a.m.

Denial Of Service (DoS)

2023-10-1106:02:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
libmspack
denial of service
chmd_read_headers
chm file
application crash

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

78.6%

libmspack is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the chmd_read_headers function of chmd.c which does not properly validate name lengths, which allows an attacker to cause an application crash through the maliciously crafted CHM file.

CPENameOperatorVersion
libmspackle0.0.5
libmspackle0.0.5

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

78.6%