Executive Summary

Informations
Name CVE-2010-2800 First vendor Publication 2010-08-09
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:P)
Cvss Base Score 4.3 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service (infinite loop) via a malformed MSZIP archive in a .cab file during a (1) test or (2) extract action, related to the libmspack library.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2800

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-399 Resource Management Errors

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 10

OpenVAS Exploits

Date Description
2010-12-02 Name : Fedora Update for cabextract FEDORA-2010-14135
File : nvt/gb_fedora_2010_14135_cabextract_fc14.nasl
2010-12-02 Name : Fedora Update for libmspack FEDORA-2010-14135
File : nvt/gb_fedora_2010_14135_libmspack_fc14.nasl
2010-10-01 Name : Fedora Update for cabextract FEDORA-2010-14634
File : nvt/gb_fedora_2010_14634_cabextract_fc12.nasl
2010-10-01 Name : Fedora Update for libmspack FEDORA-2010-14634
File : nvt/gb_fedora_2010_14634_libmspack_fc12.nasl
2010-10-01 Name : Fedora Update for cabextract FEDORA-2010-14722
File : nvt/gb_fedora_2010_14722_cabextract_fc13.nasl
2010-10-01 Name : Fedora Update for libmspack FEDORA-2010-14722
File : nvt/gb_fedora_2010_14722_libmspack_fc13.nasl
2010-08-21 Name : FreeBSD Ports: libmspack
File : nvt/freebsd_libmspack.nasl
2010-08-20 Name : Mandriva Update for cabextract MDVSA-2010:154 (cabextract)
File : nvt/gb_mandriva_MDVSA_2010_154.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
66955 cabextract MS-ZIP Decompressor Malformed MSZIP Archive Multiple Action Infini...

Nessus® Vulnerability Scanner

Date Description
2014-07-11 Name : The remote SuSE 11 host is missing a security update.
File : suse_11_cabextract-140627.nasl - Type : ACT_GATHER_INFO
2013-12-16 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201312-09.nasl - Type : ACT_GATHER_INFO
2010-10-06 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-14135.nasl - Type : ACT_GATHER_INFO
2010-10-06 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-14634.nasl - Type : ACT_GATHER_INFO
2010-10-06 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-14722.nasl - Type : ACT_GATHER_INFO
2010-08-17 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2010-154.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://bugs.gentoo.org/show_bug.cgi?id=329891
http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revis...
http://libmspack.svn.sourceforge.net/viewvc/libmspack?view=revision&revis...
http://marc.info/?l=oss-security&m=128076168623266&w=2
http://marc.info/?l=oss-security&m=128077976522470&w=2
http://www.cabextract.org.uk/#changes
http://www.vupen.com/english/advisories/2010/1903
https://bugzilla.redhat.com/show_bug.cgi?id=620450
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2024-11-28 23:07:53
  • Multiple Updates
2024-11-28 12:22:29
  • Multiple Updates
2021-05-04 12:12:09
  • Multiple Updates
2021-04-26 17:22:49
  • Multiple Updates
2019-05-10 12:03:21
  • Multiple Updates
2016-04-26 19:58:41
  • Multiple Updates
2014-07-12 13:28:06
  • Multiple Updates
2014-02-17 10:56:35
  • Multiple Updates
2013-05-10 23:29:32
  • Multiple Updates