CVE:CVE-2018-18584
CNNVD:CNNVD-201810-1143
Libmspack是一款能够对CAB、CHM和HLP等格式文件进行压缩和解压的库。cabextract是一套用于提取Microsoft cabinet文件（也称为.CAB文件）的软件。
Libmspack 0.8alpha之前版本和cabextract 1.8之前版本中的mspack/cab.h文件存在缓冲区错误漏洞。攻击者可利用该漏洞执行任意代码。
solution:Upgrade cabextract_project cabextract to a higher version than 1.8,and avoid the version (,1.8); Upgrade libmspack_project libmspack to a higher version than 0.3:alpha,0.4:alpha,0.5:alpha,0.6:alpha,0.7:alpha,0.7.1:alpha,and avoid the version 0.3:alpha,0.4:alpha,0.5:alpha,0.6:alpha,0.7:alpha,0.7.1:alpha; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,and avoid the version 12.04,14.04,16.04,18.04,18.10; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,12:ga,12:sp1,12:sp2,and avoid the version 11:sp3,12:ga,12:sp1,12:sp2; Upgrade starwindsoftware starwind_virtual_san to a higher version than -