An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-clamavalpine-linux-upgrade-libmspack | Aug 24, 2018 | Jul 28, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libmspackamazon-linux-ami-2-upgrade-libmspack-debuginfoamazon-linux-ami-2-upgrade-libmspack-devel | Apr 27, 2020 | Jul 28, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-clamav | Jan 12, 2019 | Jul 28, 2018 |
| Centos_linux | — | centos-upgrade-libmspackcentos-upgrade-libmspack-debuginfocentos-upgrade-libmspack-devel | Aug 28, 2019 | Jul 28, 2018 |
| Debian | debian-upgrade-libmspack | Aug 3, 2018 | Jul 28, 2018 | |
| Freebsd | freebsd-upgrade-package-clamav | Oct 4, 2018 | Oct 3, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-app-arch-cabextractgentoo-linux-upgrade-dev-libs-libmspack | Mar 29, 2019 | Jul 28, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libmspack | Dec 31, 2018 | Jul 28, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libmspack | Dec 31, 2018 | Jul 28, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-libmspackoracle-linux-upgrade-libmspack-devel | Nov 6, 2018 | May 12, 2018 |
| Redhat_linux | — | redhat-upgrade-libmspackredhat-upgrade-libmspack-debuginforedhat-upgrade-libmspack-devel | Oct 31, 2018 | Jul 28, 2018 |
| Suse | — | suse-upgrade-clamavsuse-upgrade-clamav-develsuse-upgrade-libclamav7suse-upgrade-libclamav9suse-upgrade-libclammspack0suse-upgrade-libfreshclam2 | Oct 24, 2018 | Jul 28, 2018 |
| Ubuntu | ubuntu-pro-upgrade-libmspack-devubuntu-pro-upgrade-libmspack-docubuntu-pro-upgrade-libmspack0ubuntu-upgrade-clamavubuntu-upgrade-libmspack0 | Aug 10, 2018 | Jul 28, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub