[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcY8-0WEytQk7MJw2Zs9lbl5HWk6MbKzQ4TsKX6cJSAg":3,"g5a-ex:cabextract_project\u002Fcabextract@*":141,"g5a-family:cabextract_project\u002Fcabextract":143},{"success":4,"data":5},true,{"product":6,"versions":50,"topVulnerabilitiesByEpss":67,"kevVulnerabilities":118,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":49},"cabextract_project","cabextract",16,9,0,"2019-11-29",[14,18,21,23,25,27,29,31,33,35,37,39,41,43,45,47],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"0.1",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"0.2",3,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"0.3",{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},"0.4",{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},"0.5",{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},"0.6",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"1.0",{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},"1.1",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"1.2",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"1.3",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"1.4",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"1.5",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"1.6",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"1.7",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"1.8",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"1.9","Cabextract by Cabextract Project is a technology product with 16 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},[68,76,84,87,92,98,102,108,113],{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":73,"severity":74,"isKev":17,"epssScore":75},"CVE-2010-2801","Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.","2010-08-09",5.1,"v2","Medium",0.04027,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":17,"epssScore":83},"CVE-2018-14682","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.","2018-07-28",8.8,"v3.0","High",0.03757,{"cveId":85,"description":86,"publishedDate":79,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":17,"epssScore":83},"CVE-2018-14681","An issue was discovered in kwajd_read_headers in mspack\u002Fkwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.",{"cveId":88,"description":89,"publishedDate":79,"cvssScore":90,"cvssVersion":81,"severity":74,"isKev":17,"epssScore":91},"CVE-2018-14680","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.",6.5,0.03705,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":73,"severity":74,"isKev":17,"epssScore":97},"CVE-2004-0916","Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.","2005-01-27",5,0.03588,{"cveId":99,"description":100,"publishedDate":79,"cvssScore":90,"cvssVersion":81,"severity":74,"isKev":17,"epssScore":101},"CVE-2018-14679","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI\u002FPMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).",0.0327,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":90,"cvssVersion":106,"severity":74,"isKev":17,"epssScore":107},"CVE-2018-18584","In mspack\u002Fcab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.","2018-10-23","v3.1",0.03086,{"cveId":109,"description":110,"publishedDate":12,"cvssScore":111,"cvssVersion":106,"severity":74,"isKev":17,"epssScore":112},"CVE-2015-2060","cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.",5.3,0.02308,{"cveId":114,"description":115,"publishedDate":71,"cvssScore":116,"cvssVersion":73,"severity":74,"isKev":17,"epssScore":117},"CVE-2010-2800","The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.",4.3,0.02286,[],{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Cabextract by Cabextract Project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cabextract by Cabextract Project covering 16 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cabextract vulnerabilities, Cabextract security, Cabextract CVE, Cabextract Project Cabextract, Cabextract threat intelligence, Cabextract Project security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Cabextract","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcabextract_project\u002Fcabextract",{"@type":129,"name":130,"url":131},"Organization","Cabextract Project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcabextract_project","Security Software","16 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cabextract Security Vulnerabilities","Security vulnerabilities affecting Cabextract by Cabextract Project",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":140},"2026-10-18T20:16:39.063Z","3.0",{"rows":142,"total":11,"capped":17,"failed":11},[],[]]