CVE-2014-9732
Fixed in a distro release EPSS 7%
The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.
Products: libmspack_project libmspack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libmspack | 0.5-1 |
| Debian 13 | libmspack | 0.5-1 |
| Debian 14 | libmspack | 0.5-1 |
| SUSE Linux Enterprise Desktop 11 SP3 | cabextract | 1.2-2.12.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | cabextract | 1.2-2.12.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Desktop 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Desktop 12 SP1 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server 11 SP3 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Server 11 SP4 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Server 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server 12 SP1 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libmspack | 0.0.20060920alpha-74.10.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libmspack | 0.4-14.4 |
| Ubuntu Pro 14.04 LTS | cabextract | 1.4-4ubuntu0.1~esm1 |
| Ubuntu Pro 14.04 LTS | libmspack | 0.4-1ubuntu0.1~esm1 |