SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

[3.4] libmspack: Multiple vulnerabilities (CVE-2017-6419, CVE-2017-11423)

ID: oval:org.secpod.oval:def:1800745	Date: (C)2018-03-29 (M)2022-08-31
Class: PATCH	Family: unix

CVE-2017-6419: heap-based buffer overflow in mspack/lzxd.c. mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CHM file.

Platform:

Alpine Linux 3.4

Product:

libmspack

Reference:

7759

CVE-2017-6419

CVE-2017-11423


30479



423868



248392



909



195452



282