CVE-2015-4471

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5

Description The issue is caused by an off-by-one error in the lzxd decompress function, which can lead to a denial of service due to a buffer under-read and application crash. This can be triggered by remote attackers via a crafted CAB archive.

Recommendations For versions prior to 0.5, update to version 0.5 or later to resolve the issue. As a temporary workaround, consider restricting the handling of CAB archives from untrusted sources to minimize the risk of exploitation.