CVE-2018-18586
Fixed in a distro release EPSS 3%
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application
Products: kyzer libmspack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libmspack | 0.8_alpha-r0 |
| Alpine 3.11 | libmspack | 0.8_alpha-r0 |
| Alpine 3.6 | libmspack | 0.8_alpha-r0 |
| Alpine 3.7 | libmspack | 0.8_alpha-r0 |
| Alpine 3.8 | libmspack | 0.8_alpha-r0 |
| Alpine 3.9 | libmspack | 0.8_alpha-r0 |
| Debian 12 | libmspack | 0.8-1 |
| Debian 13 | libmspack | 0.8-1 |
| Debian 14 | libmspack | 0.8-1 |
| SUSE Linux Enterprise Micro 5.0 | libmspack | 0.6-3.14.1 |
| SUSE Linux Enterprise Micro 5.1 | libmspack | 0.6-3.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | libmspack | 0.6-3.14.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | libmspack | 0.6-3.14.1 |
| SUSE Linux Enterprise Server 12 SP5 | libmspack | 0.4-15.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libmspack | 0.4-15.13.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libmspack | 0.4-15.13.1 |
| openSUSE Leap 15.3 | libmspack | 0.6-3.14.1 |