Home

CVE-2018-5345

Description

A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.752

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Cabinet file manipulation tool (USN-3546-1) gcab_0.7-1ubuntu0.1_i386.debLinux
Microsoft Cabinet file manipulation tool (USN-3546-1) gcab_0.7-1ubuntu0.1_amd64.debLinux
Microsoft Cabinet file manipulation tool (USN-3546-1) gcab_0.7-4ubuntu0.1_i386.debLinux
Microsoft Cabinet file manipulation tool (USN-3546-1) gcab_0.7-4ubuntu0.1_amd64.debLinux
Microsoft Cabinet file manipulation tool (USN-3546-1) libgcab-1.0-0_0.7-1ubuntu0.1_i386.debLinux
Microsoft Cabinet file manipulation tool (USN-3546-1) libgcab-1.0-0_0.7-1ubuntu0.1_amd64.debLinux
Microsoft Cabinet file manipulation tool (USN-3546-1) libgcab-1.0-0_0.7-4ubuntu0.1_i386.debLinux
Microsoft Cabinet file manipulation tool (USN-3546-1) libgcab-1.0-0_0.7-4ubuntu0.1_amd64.debLinux
gcab security update(DSA-4095-1) gcab_0.7-2+deb9u1_i386.debLinux
gcab security update(DSA-4095-1) gcab_0.7-2+deb9u1_amd64.debLinux
Gcab security update (CESA-2018:0350) gcab-0.7-4.el7_4.x86_64.rpmLinux
Gcab security update (CESA-2018:0350) libgcab1-0.7-4.el7_4.x86_64.rpmLinux
Gcab security update (CESA-2018:0350) libgcab1-0.7-4.el7_4.i686.rpmLinux
Gcab security update (CESA-2018:0350) libgcab1-devel-0.7-4.el7_4.x86_64.rpmLinux
Gcab security update (CESA-2018:0350) libgcab1-devel-0.7-4.el7_4.i686.rpmLinux
(RHSA-2018:0350) Important: gcab security update gcab-0.7-4.el7_4.x86_64.rpmLinux
(RHSA-2018:0350) Important: gcab security update libgcab1-0.7-4.el7_4.i686.rpmLinux
(RHSA-2018:0350) Important: gcab security update libgcab1-0.7-4.el7_4.x86_64.rpmLinux
(RHSA-2018:0350) Important: gcab security update libgcab1-devel-0.7-4.el7_4.i686.rpmLinux
(RHSA-2018:0350) Important: gcab security update libgcab1-devel-0.7-4.el7_4.x86_64.rpmLinux
Gcab update (ELSA-2018-0350) gcab-0.7-4.el7_4.x86_64.rpmLinux
Libgcab1 update (ELSA-2018-0350) libgcab1-0.7-4.el7_4.x86_64.rpmLinux
Libgcab1-devel update (ELSA-2018-0350) libgcab1-devel-0.7-4.el7_4.x86_64.rpmLinux
Libgcab1 update (ELSA-2018-0350) libgcab1-0.7-4.el7_4.i686.rpmLinux
Libgcab1-devel update (ELSA-2018-0350) libgcab1-devel-0.7-4.el7_4.i686.rpmLinux
(RHSA-2018:0350)Important: security update gcab-debuginfo-0.7-4.el7_4.i686.rpmLinux
(RHSA-2018:0350)Important: security update gcab-debuginfo-0.7-4.el7_4.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234