libmspack project records
11 published records for vendor libmspack project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-189 Numeric Errors6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-125 Out-of-bounds Read1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2017-6419No exploit | mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overfclamav · clamav · CWE-119 | High7.8 | — | 2.0% | Aug 6, 2017 |
27Monitor | CVE-2018-18584No exploit | In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quacabextract project · cabextract · CWE-787 | Medium6.5 | — | 3.1% | Oct 22, 2018 |
27Monitor | CVE-2015-4472No exploit | Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (applicatiolibmspack project · libmspack · CWE-189 | Medium6.8 | — | 1.6% | Jun 11, 2015 |
23Monitor | CVE-2017-11423No exploit | The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers tclamav · clamav · CWE-125 | Medium5.5 | — | 2.1% | Jul 18, 2017 |
21Monitor | CVE-2014-9556No exploit | Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted libmspack project · libmspack · CWE-189 | Medium5.0 | — | 2.8% | Feb 3, 2015 |
19Monitor | CVE-2014-9732No exploit | The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invlibmspack project · libmspack | Medium4.3 | — | 7.1% | Jun 11, 2015 |
18Monitor | CVE-2015-4471No exploit | Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buflibmspack project · libmspack · CWE-189 | Medium4.3 | — | 2.3% | Jun 11, 2015 |
17Monitor | CVE-2015-4469No exploit | The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a delibmspack project · libmspack · CWE-119 | Medium4.3 | — | 1.4% | Jun 11, 2015 |
17Monitor | CVE-2015-4468No exploit | Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cause a denial of serviclibmspack project · libmspack · CWE-189 | Medium4.3 | — | 1.4% | Jun 11, 2015 |
17Monitor | CVE-2015-4467No exploit | The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackerslibmspack project · libmspack · CWE-189 | Medium4.3 | — | 1.4% | Jun 11, 2015 |
17Monitor | CVE-2015-4470No exploit | Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer ovlibmspack project · libmspack · CWE-189 | Medium4.3 | — | 1.4% | Jun 11, 2015 |
- CVE-2017-641932Monitor
mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overf
HighCVSS 7.8No exploitEPSS 2%clamav · clamavAug 6, 2017
- CVE-2018-1858427Monitor
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Qua
MediumCVSS 6.5No exploitEPSS 3%cabextract project · cabextractOct 22, 2018
- CVE-2015-447227Monitor
Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (applicatio
MediumCVSS 6.8No exploitEPSS 2%libmspack project · libmspackJun 11, 2015
- CVE-2017-1142323Monitor
The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers t
MediumCVSS 5.5No exploitEPSS 2%clamav · clamavJul 18, 2017
- CVE-2014-955621Monitor
Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted
MediumCVSS 5.0No exploitEPSS 3%libmspack project · libmspackFeb 3, 2015
- CVE-2014-973219Monitor
The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an inv
MediumCVSS 4.3No exploitEPSS 7%libmspack project · libmspackJun 11, 2015
- CVE-2015-447118Monitor
Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buf
MediumCVSS 4.3No exploitEPSS 2%libmspack project · libmspackJun 11, 2015
- CVE-2015-446917Monitor
The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a de
MediumCVSS 4.3No exploitEPSS 1%libmspack project · libmspackJun 11, 2015
- CVE-2015-446817Monitor
Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cause a denial of servic
MediumCVSS 4.3No exploitEPSS 1%libmspack project · libmspackJun 11, 2015
- CVE-2015-446717Monitor
The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackers
MediumCVSS 4.3No exploitEPSS 1%libmspack project · libmspackJun 11, 2015
- CVE-2015-447017Monitor
Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer ov
MediumCVSS 4.3No exploitEPSS 1%libmspack project · libmspackJun 11, 2015