[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feY1QKCNoQFDPBS8ry3PFdIndwFsSnTSBI2msGkRnfyk":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":72,"topProductsByCves":73,"seoMetadata":75,"meta":84},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},4522,"cabextract_project",1,9,0,16,"2019-11-29","c",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},17963,"cabextract","Cabextract_project is a technology vendor with 1 tracked product and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,38,41,46,52,56,62,67],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2010-2801","Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.","2010-08-09",5.1,"v2","Medium",false,0.04027,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":28,"epssScore":37},"CVE-2018-14682","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.","2018-07-28",8.8,"v3.0","High",0.03757,{"cveId":39,"description":40,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":28,"epssScore":37},"CVE-2018-14681","An issue was discovered in kwajd_read_headers in mspack\u002Fkwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.",{"cveId":42,"description":43,"publishedDate":33,"cvssScore":44,"cvssVersion":35,"severity":27,"isKev":28,"epssScore":45},"CVE-2018-14680","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.",6.5,0.03705,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":51},"CVE-2004-0916","Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.","2005-01-27",5,0.03588,{"cveId":53,"description":54,"publishedDate":33,"cvssScore":44,"cvssVersion":35,"severity":27,"isKev":28,"epssScore":55},"CVE-2018-14679","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI\u002FPMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).",0.0327,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":44,"cvssVersion":60,"severity":27,"isKev":28,"epssScore":61},"CVE-2018-18584","In mspack\u002Fcab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.","2018-10-23","v3.1",0.03086,{"cveId":63,"description":64,"publishedDate":13,"cvssScore":65,"cvssVersion":60,"severity":27,"isKev":28,"epssScore":66},"CVE-2015-2060","cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.",5.3,0.02308,{"cveId":68,"description":69,"publishedDate":24,"cvssScore":70,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":71},"CVE-2010-2800","The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.",4.3,0.02286,[],[74],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":76,"metaDescription":77,"keywords":78,"structuredData":79},"Cabextract_project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cabextract_project covering 1 product with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cabextract_project vulnerabilities, Cabextract_project security, Cabextract_project CVE, Cabextract_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":80,"@type":81,"name":82,"description":77,"url":83},"https:\u002F\u002Fschema.org","Organization","Cabextract_project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcabextract_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":85,"apiVersion":86},"2026-10-19T18:52:36.679Z","3.0"]