Skip to main content

Libmspack CVE-2015-4470

MEDIUM
Numeric Errors (CWE-189)
2015-06-11 cve@mitre.org
4.3
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:N/A:P
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
None
Availability
P

Lifecycle Timeline

1
CVE Published
Jun 11, 2015 - 14:59 cve.org
MEDIUM 4.3

DescriptionCVE.org

Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CAB archive.

AnalysisAI

Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CAB archive. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-189. Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CAB archive. Affected products include: Libmspack Project Libmspack. Version information: before 0.5.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2015-4472 MEDIUM POC
6.8 Jun 11

Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial of

CVE-2019-1010305 MEDIUM POC
5.5 Jul 15

libmspack 0.9.1alpha is affected by: Buffer Overflow. Rated medium severity (CVSS 5.5), this vulnerability is no authent

CVE-2018-18586 MEDIUM POC
5.3 Oct 23

chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against a

CVE-2014-9556 MEDIUM POC
5.0 Feb 03

Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (

CVE-2018-14682 HIGH
8.8 Jul 28

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. Rated high severity (CVSS 8.8), this vulnerabilit

CVE-2018-14681 HIGH
8.8 Jul 28

An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Rated high severity (CVSS

CVE-2015-4471 MEDIUM POC
4.3 Jun 11

Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a de

CVE-2014-9732 MEDIUM POC
4.3 Jun 11

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certai

CVE-2015-4469 MEDIUM POC
4.3 Jun 11

The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote att

CVE-2015-4468 MEDIUM POC
4.3 Jun 11

Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to caus

CVE-2015-4467 MEDIUM POC
4.3 Jun 11

The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which all

CVE-2018-18585 MEDIUM POC
4.3 Oct 23

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second

Share

CVE-2015-4470 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy