Vulnerability Bulletins

DSA-3946 libmspack - security update

   
Affected software Debian
 
It was discovered that libsmpack, a library used to handle Microsoftcompression formats, did not properly validate its input. A remoteattacker could craft malicious CAB or CHM files and use this flaw tocause a denial of service via application crash, or potentiallyexecute arbitrary code.

More info:

https://www.debian.org/security/2017/dsa-3946