CVE-2015-2060

Related Files

Mandriva Linux Security Advisory 2015-064

Posted Mar 27, 2015

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2015-064 - Libmspack, a library to provide compression and decompression of some file formats used by Microsoft, is embedded in cabextract. A specially crafted cab file can cause cabextract to hang forever. If cabextract is exposed to any remotely-controlled user input, this issue can cause a denial-of-service. A directory traversal issue in cabextract allows writing to locations outside of the current working directory, when extracting a crafted cab file that encodes the filenames in a certain manner.

tags | advisory

systems | linux, mandriva

advisories | CVE-2014-9556, CVE-2015-2060

SHA-256 | 931fdb4fcafd9e838a1c08896357eb4c4f8fc0bf9584c497194f34c4c0f8da5e

Download | Favorite | View