| Package | Affected versions | Patched versions |
|---|---|---|
| cabextract | < 1.8 | 1.8 |
| libmspack | = 0.3= 0.4= 0.5= 0.6= 0.7= 0.7.1 |
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free