CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a…

published August 6, 2010

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04027 · 90.5th percentile
Published
2010-08-06T19:31Z
EPSS history
Timeline
  • 06 AUG 19:31Z
    Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a…
    cvelistv5