CVE-2014-9732 in libmspack

Sumário (Inglês)

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

11/06/2015

Divulgação

11/06/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
75845	libmspack CAB Archive cabd.c cabd_extract Negação de Serviço	476	Não provado	Correção oficial	CVE-2014-9732

Fontes

• MITRE
• NVD
• CVE Details