PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2018-5345

CVE-2018-5345

gcab: Extracting malformed .cab files causes stack smashing potentially leading to arbitrary code execution

Loading…

Severity

Important

Red Hat Product Security

5.3

CVSS 3.0

Review impact separately from score.

Published · December 19, 2017

Updated · November 22, 2025

Description

A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 5.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-121 · Stack-based Buffer Overflow