CVE-2017-11423
Description
The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.
Risk Information
Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
4.069
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| library for Microsoft compression formats (USN-3394-1) libmspack0_0.5-1ubuntu0.17.04.1_i386.deb | Linux |
| library for Microsoft compression formats (USN-3394-1) libmspack0_0.5-1ubuntu0.17.04.1_amd64.deb | Linux |
| SUSE-SU-2018:0809-1(SUSE Linux Enterprise Desktop 12-SP2 ) clamav-0.99.4-33.9.1.x86_64.rpm | Linux |
| SUSE-SU-2018:0809-1(SUSE Linux Enterprise Desktop 12-SP2 ) clamav-debuginfo-0.99.4-33.9.1.x86_64.rpm | Linux |
| SUSE-SU-2018:0809-1(SUSE Linux Enterprise Desktop 12-SP2 ) clamav-debugsource-0.99.4-33.9.1.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234