CVE-2014-9556

Name of the Vulnerable Software and Affected Versions libmspack version 0.4

Description The issue is caused by an integer overflow in the qtmd decompress function, which allows remote attackers to cause a denial of service via a crafted CAB file. This triggers an infinite loop.

Recommendations For libmspack version 0.4, update to a version that fixes the integer overflow in the qtmd decompress function to prevent remote attackers from causing a denial of service.