← Back

Gcab

gcab

Vendor: Gnome • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-5345
5Canonical
DebianFedoraproject+2 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+7 more
Nov 21, 2024
Jan 12, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.
CVE-2015-0552
2Gnome
Opensuse
2Gcab
Opensuse
May 6, 2026
Jan 15, 2015
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo....Show more
Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."Show less