CVE-2005-2659 Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors.
HighCVSS 10.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jed wing chm lib | = 0.35 | No fix listed |
| debian/chmlib(Debian:12) | < 0.37-2 | 0.37-2 |
| debian/chmlib(Debian:13) | < 0.37-2 | 0.37-2 |
| debian/chmlib(Debian:14) | < 0.37-2 | 0.37-2 |
References
- mail-index.netbsd.org
- 17325 third-party-advisory
- 17494 patch third-party-advisory vendor-advisory
- 17775 patch third-party-advisory vendor-advisory
- DSA-886 patch vendor-advisory
- 15338 vdb-entry
- Debian Security Tracker CVE-2005-2659 vendor-advisory