Skip to content
Noroxi

cabextract project records

9 published records for vendor cabextract project.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 18
  2. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2018-14682
    36Monitor

    An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.

    HighCVSS 8.8No exploitEPSS 3%

    cabextract · libmspackJul 28, 2018

  • CVE-2018-14681
    36Monitor

    An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha.

    HighCVSS 8.8No exploitEPSS 3%

    cabextract · libmspackJul 28, 2018

  • CVE-2018-14680
    27Monitor

    An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.

    MediumCVSS 6.5No exploitEPSS 3%

    cabextract · libmspackJul 28, 2018

  • CVE-2018-14679
    27Monitor

    An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha.

    MediumCVSS 6.5No exploitEPSS 3%

    cabextract · libmspackJul 28, 2018

  • CVE-2018-18584
    27Monitor

    In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Qua

    MediumCVSS 6.5No exploitEPSS 2%

    cabextract project · cabextractOct 22, 2018

  • CVE-2015-2060
    22Monitor

    cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute d

    MediumCVSS 5.3No exploitEPSS 2%

    cabextract project · cabextractNov 29, 2019

  • CVE-2010-2801
    21Monitor

    Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote a

    MediumCVSS 5.1No exploitEPSS 4%

    cabextract project · cabextractAug 9, 2010

  • CVE-2004-0916
    21Monitor

    Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containin

    MediumCVSS 5.0No exploitEPSS 3%

    cabextract project · cabextractJan 27, 2005

  • CVE-2010-2800
    18Monitor

    The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP

    MediumCVSS 4.3No exploitEPSS 2%

    cabextract project · cabextractAug 9, 2010