An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
[
{
"source": "https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "libmspack/mspack/chmd.c"
},
"id": "CVE-2018-14680-4ca3b7ad",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"49925043302351673514388068494701907030",
"161712808870032329900961784810405018411",
"121485490807141736114950494978058559156",
"7489023390805984363603892804880154015",
"202644202232952523655974633013653707746",
"138619896882174347564468407303695257759",
"15990234950511709168994928365836356022",
"256898133550272973989357990071546787788",
"312328057604315597105613547714626917165",
"333854538769822575592451592026482133150",
"311166430157540248862665973352097654759",
"219884059926347081211079070659462285352",
"147707688935502192171362132058820901553",
"165585480514541969929312430367339872957"
]
}
},
{
"source": "https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "chmd_read_headers",
"file": "libmspack/mspack/chmd.c"
},
"id": "CVE-2018-14680-7d4dd999",
"signature_type": "Function",
"digest": {
"length": 6599.0,
"function_hash": "107258753819447024680002702952495521063"
}
},
{
"source": "https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "read_chunk",
"file": "libmspack/mspack/chmd.c"
},
"id": "CVE-2018-14680-c6a42638",
"signature_type": "Function",
"digest": {
"length": 1351.0,
"function_hash": "190023709558236809867088071942484683680"
}
}
]