Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-4470
4.3
MEDIUMCVSS v2
Published
June 11, 2015
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CAB archive.
kyz/libmspack
GitHubA library for some loosely related Microsoft compression formats, CAB, CHM, HLP, LIT, KWAJ and SZDD.
GitHubA library for some loosely related Microsoft compression formats, CAB, CHM, HLP, LIT, KWAJ and SZDD.<= 0.4-3NVD