CVE-2017-11423: The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other pr...

Security readout for executives and security teams

This flaw can crash software that scans Microsoft CAB archives using affected libmspack code, including ClamAV 0.99.2. The business risk is service disruption in antivirus, mail, or file-scanning workflows when they process a malicious CAB file. Most likely exposure is systems that scan untrusted CAB files with affected ClamAV/libmspack builds, such as mail gateways, upload scanners, and endpoint antivirus. The provided data does not enumerate all downstream products. Treat as a service-availability issue, not confirmed data theft or code execution. Patch exposed scanning infrastructure on a normal security-maintenance timeline, faster where scanning is business-critical. Mitigation focus: Apply ClamAV and libmspack updates from your operating system or vendor channel.; Prioritize internet-facing mail, upload, and malware-scanning services first.; Check Debian and Gentoo advisories for distribution-specific update guidance..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.