TI-2019-16069 CVE-2019-1010305 · GHSA-w7hv-jwj8-qh4r
Memory corruption in libmspack
Priority LOW 28
libmspack 0.9.1alpha is affected by: Buffer Overflow.
3 records
libmspack 0.9.1alpha is affected by: Buffer Overflow.
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal.
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).