PT-2019-4926 · Libmspack+6 · Libmspack+6

Jshuang · Publicado 2019-02-18 · Atualizado 2025-10-01 · CVE-2019-1010305

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions libmspack version 0.9.1alpha

Description The issue is caused by a buffer overflow in the chmd read headers() function in the libmspack library, which can allow a remote attacker to disclose protected information using a specially crafted chm file. The attack vector involves the victim opening a maliciously created chm file.

Recommendations For libmspack version 0.9.1alpha, update to a version after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d to resolve the issue. As a temporary workaround, consider avoiding the use of the chmd read headers() function until a patch is available. Restrict access to specially crafted chm files to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALSA-2020:1686

BDU:2020-01531

CESA-2020_1686

CESA-2020_3848

CVE-2019-1010305

DLA-1895-1

DLA-2805-1

MGASA-2019-0248

OPENSUSE-SU-2020:0746-1

OPENSUSE-SU-2020_0746-1

OPENSUSE-SU-2024:13619-1

RHSA-2020:1686

RHSA-2020:3848

RHSA-2020_1686

RHSA-2020_3848

RLSA-2020:1686

SUSE-SU-2020:1493-1

SUSE-SU-2020:2711-1

SUSE-SU-2020_1493-1

USN-4066-1

USN-4066-2

USN-7788-1

Produtos afetados

Almalinux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Libmspack

Referências · 69

• 🔥 https://github.com/kyz/libmspack/issues/27 · Exploit
• https://github.com/kyz/libmspack/commit/2f084136cfe0d05e5bf5703f3e83c6d955234b4d · Correção
• https://usn.ubuntu.com/4066-2 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2019-1010305 · Nota
• https://t.me/cvenotify/22753 · Publicação no Telegram
• https://osv.dev/vulnerability/USN-7788-1 · Aviso do Fabricante
• https://lists.opensuse.org/archives/list/[e-mail]/thread/S6T5SQLZ2AFX7P4RLGAUWJ7UXHA563FA · Nota
• https://suse.com/security/cve/CVE-2018-18585 · Nota
• https://ubuntu.com/security/CVE-2018-14679 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-1010305 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-1010305 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-7788-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-4472 · Aviso do Fabricante
• https://vulners.com/cve/CVE-2019-1010305 · Nota
• https://suse.com/security/cve/CVE-2018-18584 · Nota