Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-4469
4.3
MEDIUMCVSS v2
Published
June 11, 2015
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.
kyz/libmspack
GitHubA library for some loosely related Microsoft compression formats, CAB, CHM, HLP, LIT, KWAJ and SZDD.
GitHubA library for some loosely related Microsoft compression formats, CAB, CHM, HLP, LIT, KWAJ and SZDD.<= 0.4-3NVD