[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUmcwK1kZa7t-ZUZ2r9oygoPxFp7lASl9bYdLtgSPChM":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":75,"topProductsByCves":76,"seoMetadata":78,"meta":87},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},17660,"libmspack_project",1,11,0,7,"2018-10-23","l",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},103592,"libmspack","Libmspack_project is a technology vendor with 1 tracked product and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,36,42,46,53,60,65,69,72],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2014-9732","The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted CAB archive.","2015-06-11",4.3,"v2","Medium",false,0.07114,{"cveId":31,"description":32,"publishedDate":13,"cvssScore":33,"cvssVersion":34,"severity":27,"isKev":28,"epssScore":35},"CVE-2018-18584","In mspack\u002Fcab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.",6.5,"v3.1",0.03086,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":41},"CVE-2014-9556","Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.","2015-02-03",5,0.02817,{"cveId":43,"description":44,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":45},"CVE-2015-4471","Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (buffer under-read and application crash) via a crafted CAB archive.",0.02303,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":27,"isKev":28,"epssScore":52},"CVE-2017-11423","The cabd_read_string function in mspack\u002Fcabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.","2017-07-18",5.5,"v3.0",0.02067,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":51,"severity":58,"isKev":28,"epssScore":59},"CVE-2017-6419","mspack\u002Flzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file.","2017-08-07",7.8,"High",0.01976,{"cveId":61,"description":62,"publishedDate":24,"cvssScore":63,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":64},"CVE-2015-4472","Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CHM file.",6.8,0.01555,{"cveId":66,"description":67,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":68},"CVE-2015-4467","The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted CHM file.",0.01428,{"cveId":70,"description":71,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":68},"CVE-2015-4469","The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.",{"cveId":73,"description":74,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":68},"CVE-2015-4468","Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.",[],[77],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":79,"metaDescription":80,"keywords":81,"structuredData":82},"Libmspack_project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Libmspack_project covering 1 product with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Libmspack_project vulnerabilities, Libmspack_project security, Libmspack_project CVE, Libmspack_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":83,"@type":84,"name":85,"description":80,"url":86},"https:\u002F\u002Fschema.org","Organization","Libmspack_project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flibmspack_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":88,"apiVersion":89},"2026-10-18T19:50:41.004Z","3.0"]