PT-2015-6603 · Microsoft+2 · Libmspack+2
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
libmspack versions prior to 0.5
Description
The issue is caused by an off-by-one error in the READ ENCINT macro in chmd.c, which allows remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts via a crafted CHM file.
Recommendations
For libmspack versions prior to 0.5, update to version 0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted CHM files to minimize the risk of exploitation.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Libmspack