Alpine/libmspack: medium 5.3
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: t
Action: Upgrade libmspack to 0.8_alpha-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8_alpha-r0 | - |
Fixed versions
| 0.8_alpha-r0 |
Sources
- osv: ALPINE-CVE-2018-18586#Alpine:v3.11/libmspack
- https://security.alpinelinux.org/vuln/CVE-2018-18586
published · modified · JSON