VDB
GCVE-110-MAGEIA-2018-111
GCVE-110-MAGEIA-2018-111
Advisory Published
It was discovered that gcab is prone to a stack-based buffer overflow
vulnerability when extracting .cab files. An attacker can take advantage
of this flaw to cause a denial-of-service or, potentially the execution
of arbitrary code with the privileges of the user running gcab, if a
specially crafted .cab file is processed (CVE-2018-5345).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | gcab | 0 (affected), 0 (affected), 0.4-6.1.mga5 (unaffected), 0.4-6.1.mga5 (unaffected) | — |
| Mageia | gnucash | 0 (affected), 2.6.21-1.mga6 (unaffected) | — |
| Mageia | gcab | 0 (affected), 0.7-1.1.mga6 (unaffected), 0 (affected), 0.7-1.1.mga6 (unaffected) | — |
Aliases
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.