CVE-2005-2930 Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via....
MediumCVSS 5.1
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jed wing chm lib | = 0.1 | No fix listed |
| jed wing chm lib | = 0.2 | No fix listed |
| jed wing chm lib | = 0.3 | No fix listed |
| jed wing chm lib | = 0.31 | No fix listed |
| jed wing chm lib | = 0.32 | No fix listed |
| jed wing chm lib | = 0.33 | No fix listed |
| jed wing chm lib | = 0.35 | No fix listed |
| debian/chmlib(Debian:12) | < 0.36-1 | 0.36-1 |
| debian/chmlib(Debian:13) | < 0.36-1 | 0.36-1 |
| debian/chmlib(Debian:14) | < 0.36-1 | 0.36-1 |
References
- 17775 patch third-party-advisory vendor-advisory
- 125 third-party-advisory
- 1015120 patch vdb-entry vendor-advisory
- 20051028 Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability patch third-party-advisory vendor-advisory
- 15234 patch vdb-entry
- ADV-2005-2249 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2005-2930 vendor-advisory
- bugs.debian.org issue-tracking