CVE-2010-2800
Fixed in a distro release EPSS 2%
The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.
Products: cabextract_project cabextract
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cabextract | 1.3-1 |
| Debian 13 | cabextract | 1.3-1 |
| Debian 14 | cabextract | 1.3-1 |