CVE-2014-9556
Fixed in a distro release EPSS 3%
Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
Products: libmspack_project libmspack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cabextract | 1.4-5 |
| Debian 12 | libmspack | 0.4-2 |
| Debian 13 | cabextract | 1.4-5 |
| Debian 13 | libmspack | 0.4-2 |
| Debian 14 | cabextract | 1.4-5 |
| Debian 14 | libmspack | 0.4-2 |
| SUSE Linux Enterprise Desktop 11 SP3 | cabextract | 1.2-2.12.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | cabextract | 1.2-2.12.1 |
| SUSE Linux Enterprise Desktop 12 | libmspack | 0.4-10.1 |
| SUSE Linux Enterprise Desktop 12 | libmspack | 0.4-6.1 |
| SUSE Linux Enterprise Server 12 | libmspack | 0.4-6.1 |
| SUSE Linux Enterprise Server 12 | libmspack | 0.4-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libmspack | 0.4-10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libmspack | 0.4-6.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libmspack | 0.4-10.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libmspack | 0.4-6.1 |
| Ubuntu Pro 14.04 LTS | cabextract | 1.4-4ubuntu0.1~esm1 |
| Ubuntu Pro 14.04 LTS | libmspack | 0.4-1ubuntu0.1~esm1 |