tocsin

Debian/libmspack: unknown

The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attacker

Action: Upgrade libmspack to 0.5-1 or later.

Affected

introducedfixedlast affected
00.5-1-

Fixed versions

0.5-1

Sources

published · modified · JSON