USN-7788-1

Dashboard / Vulnerabilities / USN-7788-1

USN-7788-1

Summary: libmspack vulnerabilities

Details: Jakub Wilk discovered that libmspack did not correctly handle certain integer operations and bounds checking. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2015-4467, CVE-2015-4468, CVE-2015-4469, CVE-2015-4472) It was discovered that libmspack incorrectly handled certain malformed CAB files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service. (CVE-2017-11423) It was discovered that libmspack incorrectly handled certain malformed CHM files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-6419) Hanno Böck discovered that libmspack incorrectly handled certain CHM files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-14679, CVE-2018-14680) Jakub Wilk discovered that libmspack incorrectly handled certain KWAJ files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-14681) Dmitry Glavatskikh discovered that libmspack incorrectly handled certain CHM files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-14682) It was discovered libmspack incorrectly handled certain malformed CAB files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service. (CVE-2018-18585) It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information. (CVE-2019-1010305)

References: https://ubuntu.com/security/notices/USN-7788-1, https://ubuntu.com/security/CVE-2015-4467, https://ubuntu.com/security/CVE-2015-4468, https://ubuntu.com/security/CVE-2015-4469, https://ubuntu.com/security/CVE-2015-4472, https://ubuntu.com/security/CVE-2017-6419, https://ubuntu.com/security/CVE-2017-11423, https://ubuntu.com/security/CVE-2018-14679, https://ubuntu.com/security/CVE-2018-14680, https://ubuntu.com/security/CVE-2018-14681, https://ubuntu.com/security/CVE-2018-14682, https://ubuntu.com/security/CVE-2018-18585, https://ubuntu.com/security/CVE-2019-1010305