Buffer Overflow Vulnerability in libmspack: Information Disclosure Risk
Summary
ALPINE-CVE-2019-1010305: libmspack 0.9.1alpha is affected by: Buffer Overflow. Affects libmspack versions < 0.8_alpha-r1. Fixed in 0.8_alpha-r1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libmspack is a library designed for handling Microsoft Compiled HTML Help (CHM) files. It provides functionalities for reading and extracting content from CHM files, making it a useful tool for applications that need to display help documentation. However, certain versions of libmspack are susceptible to a buffer overflow vulnerability that can lead to information disclosure when a specially crafted CHM file is opened.
Vulnerability Detail
The vulnerability, identified as CVE-2019-1010305, originates from the function chmd_read_headers() in the libmspack library. It allows an attacker to craft a malicious CHM file that, when opened by a victim, can cause a buffer overflow. This overflow can potentially lead to the disclosure of sensitive information. The severity of this vulnerability is reflected in its CVSS score of 5.5, indicating a moderate risk level. The affected versions include libmspack prior to 0.8_alpha-r1 for Alpine v3.10, v3.8, and v3.9, and prior to 0.10.1_alpha-r0 for Alpine v3.11.
How To Fix
Minimum fixed version
0.8_alpha-r1
This is the first release that contains the fix.
sudo apk add --upgrade libmspackTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, avoid opening CHM files from untrusted sources until the package is updated to a secure version. Additionally, consider using alternative methods to access help documentation that do not rely on CHM files.
Conclusion
The buffer overflow vulnerability in libmspack poses a significant risk of information disclosure when handling malicious CHM files. It is crucial to update to the patched versions of the library to mitigate this risk. Users are also advised to exercise caution when dealing with CHM files from untrusted sources.
See every vulnerability recorded for libmspack →
FAQ
CVE-2019-1010305 is a vulnerability in the libmspack library that allows for a buffer overflow, potentially leading to information disclosure when a malicious CHM file is opened.
Affected versions include libmspack prior to 0.8_alpha-r1 for Alpine v3.10, v3.8, and v3.9, and prior to 0.10.1_alpha-r0 for Alpine v3.11.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, avoid opening CHM files from untrusted sources as a temporary measure.
The CVSS score of this vulnerability is 5.5, indicating a moderate risk level.
References
Related vulnerabilities
Recent vulnerabilities recorded for libmspack.
