Approved changes feed: RSS · Atom

cpe:2.3:a:cabextract:libmspack:0.6:alpha:*:*:*:*:*:*

part: a version: 0.6 update: alpha

VendorCabextract (68a7fe40-90af-5ada-be78-85e9c7fc924a)
ProductLibmspack (deffbc21-d7ad-5768-9a2b-3ccd29903669)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libmspack purl2cpe 2026-06-01 10:16:15.881566
pkg:deb/ubuntu/libmspack purl2cpe 2026-06-01 10:16:15.881567
pkg:gem/libmspack purl2cpe 2026-06-01 10:16:15.881569
pkg:github/kyz/libmspack purl2cpe 2026-06-01 10:16:15.881570
pkg:rpm/centos/libmspack purl2cpe 2026-06-01 10:16:15.881572
pkg:rpm/fedora/libmspack purl2cpe 2026-06-01 10:16:15.881573
pkg:rpm/opensuse/libmspack purl2cpe 2026-06-01 10:16:15.881575

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14682 vulnerable 2026-06-08 05:10:53.290929 Details available
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
Published: 2018-07-28T23:00:00.000Z
Updated: 2024-08-05T09:38:12.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14681 vulnerable 2026-06-08 05:10:53.289841 Details available
An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
Published: 2018-07-28T23:00:00.000Z
Updated: 2024-08-05T09:38:13.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14680 vulnerable 2026-06-08 05:10:53.285326 Details available
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
Published: 2018-07-28T23:00:00.000Z
Updated: 2024-08-05T09:38:13.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14679 vulnerable 2026-06-08 05:10:53.281670 Details available
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
Published: 2018-07-28T23:00:00.000Z
Updated: 2024-08-05T09:38:13.452Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.