CVE-2010-2801

CVE-2010-2801 describes an integer signedness error in the Quantum decompressor of cabextract versions prior to 1.3, specifically when archive test mode is utilized. This flaw, related to the libmspack library, allows user-assisted remote attackers to trigger a denial of service (application crash) or potentially execute arbitrary code through a specially crafted Quantum archive embedded in a .cab file. The vulnerability has a CVSS score of 5.1, indicating a medium severity. It can be exploited over the network with high attack complexity, and successful exploitation could lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting a low level of public attention.