libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.
CPE | Name | Operator | Version |
---|---|---|---|
ubuntu_linux | eq | 16.04 | |
ubuntu_linux | eq | 12.04 | |
ubuntu_linux | eq | 18.04 | |
ubuntu_linux | eq | 14.04 | |
debian_linux | eq | 8.0 | |
debian_linux | eq | 9.0 | |
fedora | eq | 29 | |
fedora | eq | 30 | |
libmspack | eq | 0.9.1 alpha |
github.com/kyz/libmspack/commit/2f084136cfe0d05e5bf5703f3e83c6d955234b4d
github.com/kyz/libmspack/issues/27
lists.debian.org/debian-lts-announce/2019/08/msg00028.html
lists.debian.org/debian-lts-announce/2021/10/msg00033.html
lists.fedoraproject.org/archives/list/[email protected]/message/IXWNEY4CJBLPRKV6LG7FQUPD6WVZYBTB/
lists.fedoraproject.org/archives/list/[email protected]/message/S2QJTUAGP22YY7453MHGTFN4YQE5HJBR/
usn.ubuntu.com/4066-1/
usn.ubuntu.com/4066-2/