PT-2015-4271 · Microsoft+1 · Libmspack+1

Jakub Wilk · Publicado 2015-01-30 · Atualizado 2018-10-30 · CVE-2014-9556

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions libmspack version 0.4

Description The issue is caused by an integer overflow in the qtmd decompress function, which allows remote attackers to cause a denial of service via a crafted CAB file. This triggers an infinite loop.

Recommendations For libmspack version 0.4, update to a version that fixes the integer overflow in the qtmd decompress function to prevent remote attackers from causing a denial of service.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2014-9556

MGASA-2015-0052

OPENSUSE-SU-2024:10365-1

SUSE-SU-2015:0366-1

SUSE-SU-2015:0506-1

SUSE-SU-2015:0508-1

SUSE-SU-2015:2131-1

SUSE-SU-2015_0366-1

SUSE-SU-2015_0506-1

SUSE-SU-2015_0508-1

SUSE-SU-2015_2131-1

Produtos afetados

Suse

Libmspack

Referências · 46

• 🔥 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773041 · Exploit
• https://suse.com/security/cve/CVE-2014-9556 · Nota
• https://bugzilla.suse.com/912214 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2015:2131-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2014-9556 · Aviso do Fabricante
• https://bugzilla.suse.com/934524 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2015:041 · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2015-November/001703.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9556 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2015-February/001249.html · Nota
• https://osv.dev/vulnerability/MGASA-2015-0052 · Aviso do Fabricante
• http://support.novell.com/security/cve/CVE-2014-9556.html · Nota
• https://advisories.mageia.org/MGASA-2015-0052.html · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/01/07/2 · Nota
• http://secunia.com/advisories/62793 · Nota