CVE-2018-18586

chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM…

published October 23, 2018

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03284 · 88.3th percentile
Published
2018-10-23T02:00Z
EPSS history
Timeline
  • 23 OCT 02:00Z
    chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM…
    cvelistv5