[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feY1QKCNoQFDPBS8ry3PFdIndwFsSnTSBI2msGkRnfyk":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":73,"topProductsByCves":74,"seoMetadata":76,"meta":85},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},4522,"cabextract_project",1,9,0,16,"2019-11-29","c",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},17963,"cabextract","Cabextract_project is a technology vendor with 1 tracked product and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,38,43,47,53,57,63,68],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2010-2801","Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the libmspack library.","2010-08-09",5.1,"v2","Medium",false,0.04027,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":28,"epssScore":37},"CVE-2018-14681","An issue was discovered in kwajd_read_headers in mspack\u002Fkwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.","2018-07-28",8.8,"v3.0","High",0.03757,{"cveId":39,"description":40,"publishedDate":33,"cvssScore":41,"cvssVersion":35,"severity":27,"isKev":28,"epssScore":42},"CVE-2018-14680","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.",6.5,0.03705,{"cveId":44,"description":45,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":28,"epssScore":46},"CVE-2018-14682","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.",0.0361,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":52},"CVE-2004-0916","Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.","2005-01-27",5,0.03588,{"cveId":54,"description":55,"publishedDate":33,"cvssScore":41,"cvssVersion":35,"severity":27,"isKev":28,"epssScore":56},"CVE-2018-14679","An issue was discovered in mspack\u002Fchmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI\u002FPMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).",0.0327,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":41,"cvssVersion":61,"severity":27,"isKev":28,"epssScore":62},"CVE-2018-18584","In mspack\u002Fcab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.","2018-10-23","v3.1",0.02662,{"cveId":64,"description":65,"publishedDate":13,"cvssScore":66,"cvssVersion":61,"severity":27,"isKev":28,"epssScore":67},"CVE-2015-2060","cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.",5.3,0.02308,{"cveId":69,"description":70,"publishedDate":24,"cvssScore":71,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":72},"CVE-2010-2800","The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.",4.3,0.02286,[],[75],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":77,"metaDescription":78,"keywords":79,"structuredData":80},"Cabextract_project - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Cabextract_project covering 1 product with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cabextract_project vulnerabilities, Cabextract_project security, Cabextract_project CVE, Cabextract_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":81,"@type":82,"name":83,"description":78,"url":84},"https:\u002F\u002Fschema.org","Organization","Cabextract_project","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcabextract_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":86,"apiVersion":87},"2026-10-28T15:05:12.247Z","3.0"]