CVE-2018-18585

Publication date

2018-10-23 00:00:00

Family

mitre

State

PUBLISHED

Description

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has 0 as its first or second character (such as the "/0" name).