cabextract MS-ZIP and Quantum Decompressed '.cab' File Denial Of Service Vulnerability
BID:42131
Info
cabextract MS-ZIP and Quantum Decompressed '.cab' File Denial Of Service Vulnerability
| Bugtraq ID: | 42131 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-2800 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 02 2010 12:00AM |
| Updated: | Apr 13 2015 08:26PM |
| Credit: | Unknown |
| Vulnerable: |
Pardus Linux 2009 0 Gentoo Linux |
| Not Vulnerable: | |
Discussion
cabextract MS-ZIP and Quantum Decompressed '.cab' File Denial Of Service Vulnerability
cabextract is prone to a denial-of-service vulnerability because some decompressors fail to properly handle zero-byte '.cab' files.
Attackers can exploit this issue to cause denial-of-service conditions.
Versions prior to cabextract 1.3 are vulnerable.
cabextract is prone to a denial-of-service vulnerability because some decompressors fail to properly handle zero-byte '.cab' files.
Attackers can exploit this issue to cause denial-of-service conditions.
Versions prior to cabextract 1.3 are vulnerable.
Exploit / POC
cabextract MS-ZIP and Quantum Decompressed '.cab' File Denial Of Service Vulnerability
Attackers can use readily available utilities to trigger the issue.
Attackers can use readily available utilities to trigger the issue.
Solution / Fix
cabextract MS-ZIP and Quantum Decompressed '.cab' File Denial Of Service Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
cabextract MS-ZIP and Quantum Decompressed '.cab' File Denial Of Service Vulnerability
References:
References: