| Package | Affected versions | Patched versions |
|---|---|---|
| libmspack | = 0.0.20060920= 0.3= 0.4= 0.5= 0.6 | |
| cabextract | ≤ 1.5 | |
| ansible tower | = 3.3 |
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free