« Volver al listado

CVE-2010-2801

Estado: ModificadaMedia (5.1)—

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cabextract Project — Cabextract

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-2801",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-08-09T11:58:17.487",
  "references": [
    {
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=329891",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://marc.info/?l=oss-security&m=128076168623266&w=2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://marc.info/?l=oss-security&m=128077976522470&w=2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.cabextract.org.uk/#changes",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2010/dsa-2087",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/42173",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1903",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1997",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=620454",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/60891",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=329891",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://libmspack.svn.sourceforge.net/viewvc/libmspack/libmspack/trunk/mspack/qtmd.c?r1=114&r2=113",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revision=118",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=oss-security&m=128076168623266&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=oss-security&m=128077976522470&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cabextract.org.uk/#changes",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2010/dsa-2087",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/42173",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1903",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1997",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=620454",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/60891",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library."
    },
    {
      "lang": "es",
      "value": "Error de presencia de signo en el decompresor Quantum en cabextract anteriores a v1.3, cuando está activado el modo test, permite a atacantes remotos asistidos por usuarios, provocar una denegación de servicio (caída de la aplicación) o posiblemente ejecución de código de su elección a través de un fichero Quatum modificado en un fichero .cab, relativo a la biblioteca libmspack.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:21:31.957",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33B40EA4-BB4F-4A35-973F-BA856014B2F1",
              "versionEndIncluding": "1.2"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D7B9CCF-67F3-4DC5-9362-09EE3D0FD87F"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "924128C3-DE58-4B6A-A497-59B5D3D311DE"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24D2543F-BE6B-46FB-93E0-C0F9DEC4490D"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B596E7E-F51E-4DFF-A81F-21E4C3C81F63"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63BDBB7A-673E-412B-BE69-05672AA3050D"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D5EC4F7-C88D-4DBA-A371-58DF4E6344A7"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "670769A1-4133-4834-94E0-BF5F3EF2FFF5"
            },
            {
              "criteria": "cpe:2.3:a:cabextract_project:cabextract:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDBD05D3-31A4-4079-A9E2-2B7EF6403624"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}