cve/2019/CVE-2019-1010305.md

### [CVE-2019-1010305](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010305)
![](https://img.shields.io/static/v1?label=Product&message=libmspack&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Overflow&color=brighgreen)

### Description

libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.

### POC

#### Reference
- https://github.com/kyz/libmspack/commit/2f084136cfe0d05e5bf5703f3e83c6d955234b4d
- https://github.com/kyz/libmspack/issues/27

#### Github
No PoCs found on GitHub currently.