Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-18586
5
MEDIUMCVSS v2
Published
October 23, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application
kyz/libmspack
GitHubA library for some loosely related Microsoft compression formats, CAB, CHM, HLP, LIT, KWAJ and SZDD.
GitHubA library for some loosely related Microsoft compression formats, CAB, CHM, HLP, LIT, KWAJ and SZDD.= 0.7, = 0.6, = 0.5, = 0.4, = 0.3NVD