CVE-2019-1010305: canonical ubuntu_linux

Vulnerability summary

CVE-2019-1010305 is a medium (CVSS 5.5) vulnerability in canonical ubuntu_linux. EPSS estimates a 1.52% chance of exploitation in the next 30 days, higher than 74.2% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 15-07-2019
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.