MGASA-2017-0283

Source
https://advisories.mageia.org/MGASA-2017-0283.html
Import Source
https://advisories.mageia.org/MGASA-2017-0283.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2017-0283
Related
Published
2017-08-19T09:58:33Z
Modified
2017-08-19T09:41:28Z
Summary
Updated libmspack packages fix security vulnerabilities
Details

It was discovered that libmspack incorrectly handled certain malformed CHM files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2017-6419).

It was discovered that libmspack incorrectly handled certain malformed CAB files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service (CVE-2017-11423).

References
Credits

Affected packages