libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libmspackUpgrade libmspack-devel | May 4, 2022 | Jul 15, 2019 |
| Alpine Linux | — | Upgrade libmspack | May 8, 2020 | Jul 15, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libmspack-develUpgrade libmspack-debuginfoUpgrade libmspack | Oct 28, 2020 | Jul 15, 2019 |
| Centos_linux | — | Upgrade libmspackUpgrade libmspack-develUpgrade libmspack-debuginfoUpgrade libmspack-debugsource | Apr 29, 2020 | Jul 15, 2019 |
| Debian | — | Upgrade libmspack | Aug 26, 2019 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libmspack | Sep 12, 2019 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libmspack | Sep 25, 2019 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libmspack | Sep 12, 2019 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libmspack | Aug 28, 2019 | Jul 15, 2019 |
| Oracle_linux | — | Upgrade libmspackUpgrade libmspack-devel | Jun 5, 2020 | Jul 15, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 15, 2019 |
| Redhat_linux | — | Upgrade libmspackUpgrade libmspack-debuginfoUpgrade libmspack-debugsourceUpgrade libmspack-devel | Apr 29, 2020 | Jul 15, 2019 |
| Rocky_linux | — | Upgrade libmspack-debugsourceUpgrade libmspack-develUpgrade libmspack-debuginfoUpgrade libmspack | Mar 12, 2024 | Jul 15, 2019 |
| Suse | — | Upgrade libmspack0-32bitUpgrade mspack-toolsUpgrade libmspack0Upgrade libmspack-devel | Jun 1, 2020 | Jul 15, 2019 |
| Ubuntu | — | Upgrade clamavUpgrade libmspack0Upgrade libmspack0 (Ubuntu Pro)Upgrade clamav (Ubuntu Pro)Upgrade libmspack-doc (Ubuntu Pro)Upgrade libmspack-dev (Ubuntu Pro) | Jul 19, 2019 | Jul 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub