CVE:CVE-2018-18585
CNNVD:CNNVD-201810-1144
Libmspack是一个能够对CAB、CHM和HLP等格式文件进行压缩和解压的库。
Libmspack 0.8alpha之前版本中的mspack/chmd.c文件的‘chmd_read_headers’函数存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade kyzer libmspack to a higher version than 0.3:alpha,0.4:alpha,0.5:alpha,0.6:alpha,0.7:alpha,and avoid the version 0.3:alpha,0.4:alpha,0.5:alpha,0.6:alpha,0.7:alpha; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,and avoid the version 12.04,14.04,16.04,18.04,18.10; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,12:ga,12:sp1,12:sp2,and avoid the version 11:sp3,12:ga,12:sp1,12:sp2; Upgrade starwindsoftware starwind_virtual_san to a higher version than -