CVE-2015-4468
Fixed in a distro release EPSS 1%
Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.
Products: libmspack_project libmspack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libmspack | 0.4-3 |
| Debian 13 | libmspack | 0.4-3 |
| Debian 14 | libmspack | 0.4-3 |
| SUSE Linux Enterprise Desktop 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Desktop 12 SP1 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server 12 SP1 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Software Development Kit 12 | libmspack | 0.4-14.4 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libmspack | 0.4-14.4 |
| Ubuntu Pro 14.04 LTS | libmspack | 0.4-1ubuntu0.1~esm2 |