Libmspack chmd_read_headers Function Denial of Service Vulnerability (CVE-2015-4469)

Libmspack chmd_read_headers Function Denial of Service Vulnerability (CVE-2015-4469)
Libmspack chmd_read_headers Function Denial of Service Vulnerability (CVE-2015-4469)

Release date:
Updated on:

Affected Systems:

Libmspack libmspack< 0.5

Description:

CVE (CAN) ID: CVE-2015-4469

Libmspack is a library suitable for Microsoft File compression formats.

In versions earlier than Libmspack 0.5, The chmd_read_headers function of chmd. c does not verify the name length. Remote attackers can exploit this vulnerability to cause DoS (application crash) by constructing CHM files.

<* Source: Jakub Wilk
*>

Suggestion:

Vendor patch:

Libmspack
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://sourceforge.net/projects/libmspack/

This article permanently updates the link address: