CVE-2018-14679

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha

Description An issue was discovered in the chmd.c file of libmspack, where an off-by-one error in the CHM PMGI/PMGL chunk number validity checks could lead to denial of service. This occurs due to an uninitialized data dereference, resulting in an application crash.

Recommendations For versions prior to 0.7alpha, update to version 0.7alpha or later to resolve the issue. As a temporary workaround, consider restricting the use of the chmd.c file until a patch is available.