CVE-2014-9556: Integer Overflow
Integer overflow in the qtmddecompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9556?
CVE-2014-9556 has a severity rating that indicates it can lead to denial of service due to an infinite loop triggered by a crafted CAB file.
How do I fix CVE-2014-9556?
To fix CVE-2014-9556, you should upgrade to a version of libmspack beyond 0.4 that addresses this integer overflow vulnerability.
What versions of libmspack are affected by CVE-2014-9556?
CVE-2014-9556 specifically affects libmspack version 0.4, and earlier versions may also be vulnerable.
Can CVE-2014-9556 be exploited remotely?
Yes, CVE-2014-9556 can be exploited remotely by delivering a crafted CAB file to the target system.
What are the potential impacts of CVE-2014-9556?
The potential impacts of CVE-2014-9556 include causing the application using libmspack to hang and experience denial of service.