CVE-2015-4467: Medium severity libmspack vulnerability
Published Jun 11, 2015
·Updated
The chmdinitdecomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted CHM file.
Affected Software
1 affected component
Libmspack Project Libmspack<=0.4-3
Event History
Jun 11, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4467?
CVE-2015-4467 is classified as a denial of service vulnerability.
2
How do I fix CVE-2015-4467?
To fix CVE-2015-4467, upgrade libmspack to version 0.5 or later.
3
What types of attacks does CVE-2015-4467 allow?
CVE-2015-4467 allows remote attackers to cause a denial of service by using a specially crafted CHM file.
4
Which versions of libmspack are affected by CVE-2015-4467?
Versions of libmspack prior to 0.5 are affected by CVE-2015-4467.
5
What is the cause of the vulnerability in CVE-2015-4467?
The vulnerability in CVE-2015-4467 is caused by improper validation of the reset interval in the chmd_init_decomp function.