CVE-2014-9556

EPSS 1.1%

發布日:2015/2/3修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-9556

描述

Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.

受影響套件(2)

Debian/cabextractfrom 0, < 1.4-5
Debian/libmspackfrom 0, < 0.4-2

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-9556