Gnome Gcab vulnerabilities

2 CVEs affecting Gnome Gcab, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5345, published 2018-01-12.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0552, published 2015-01-15. Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as…
• CVE-2018-5345, published 2018-01-12. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code via a crafted .cab file.