DwfCVELIST:CVE-2019-1010305CVE-2019-1010305
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.
CNA Affected
[
{
"product": "libmspack",
"vendor": "libmspack",
"versions": [
{
"status": "affected",
"version": "0.9.1alpha [fixed: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d]"
}
]
}
]References
github.com/kyz/libmspack/commit/2f084136cfe0d05e5bf5703f3e83c6d955234b4d
github.com/kyz/libmspack/issues/27
lists.debian.org/debian-lts-announce/2019/08/msg00028.html
lists.debian.org/debian-lts-announce/2021/10/msg00033.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IXWNEY4CJBLPRKV6LG7FQUPD6WVZYBTB/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2QJTUAGP22YY7453MHGTFN4YQE5HJBR/
usn.ubuntu.com/4066-1/
usn.ubuntu.com/4066-2/
Related
5.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.7%