BID:42173

cabextract '.cab' File Code Execution Vulnerability

Info

cabextract '.cab' File Code Execution Vulnerability

Bugtraq ID:	42173
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2010-2801
Remote:	Yes
Local:	No
Published:	Aug 04 2010 12:00AM
Updated:	May 07 2015 05:05PM
Credit:	Debian
Vulnerable:	Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 cabextract cabextract 1.2

Not Vulnerable:

Discussion

cabextract '.cab' File Code Execution Vulnerability

cabextract is prone to an arbitrary code-execution vulnerability because the application fails to correctly handle certain '.cab' files in test archive mode.

Attackers can exploit this issue to execute arbitrary code or cause denial-of-service conditions.

cabextract version 1.2 is vulnerable; other versions may also be affected.

Note: The vulnerability occurs only if the application is run in test archive mode.

Exploit / POC

cabextract '.cab' File Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

cabextract '.cab' File Code Execution Vulnerability

Solution:
Updates are available; please see the references for more information.

Debian Linux 5.0 ia-64