CVE-2004-0916

概要

参考情報

• secunia.com/advisories/12882 · Patch
• debian.org/security/2004/dsa-574 · Patch
• kyz.uklinux.net/cabextract.php
• securityfocus.com/bid/11460 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/17766

cabextract のその他の脆弱性

• CVE-2015-2060中 5.3cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute d…
• CVE-2018-18584中 6.5In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Qua…
• CVE-2018-14682高 8.8An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompres…
• CVE-2018-14681高 8.8An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a …
• CVE-2018-14680中 6.5An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.