An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. ...
An issue was discovered in kwajdreadheaders in mspack/kwajd.c in lib ...
An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.