Cabextract
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Cabextract product.
RSS Feeds for Cabextract security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Cabextract products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Cabextract Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2025 there have been 0 vulnerabilities in Cabextract. Cabextract did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 4 | 7.65 |
It may take a day or so for new Cabextract vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Cabextract Security Vulnerabilities
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha
CVE-2018-14679
6.5 - Medium
- July 28, 2018
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
off-by-five
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha
CVE-2018-14680
6.5 - Medium
- July 28, 2018
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
Improper Input Validation
An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha
CVE-2018-14681
8.8 - High
- July 28, 2018
An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
Memory Corruption
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha
CVE-2018-14682
8.8 - High
- July 28, 2018
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
off-by-five