CVE-2005-3318 Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability tha...
MediumCVSS 5.1
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jed wing chm lib | = 0.1 | No fix listed |
| jed wing chm lib | = 0.2 | No fix listed |
| jed wing chm lib | = 0.3 | No fix listed |
| jed wing chm lib | = 0.31 | No fix listed |
| jed wing chm lib | = 0.32 | No fix listed |
| jed wing chm lib | = 0.33 | No fix listed |
| jed wing chm lib | = 0.35 | No fix listed |
| jed wing chm lib | = 0.36 | No fix listed |
| debian/chmlib(Debian:12) | < 0.37-1 | 0.37-1 |
| debian/chmlib(Debian:13) | < 0.37-1 | 0.37-1 |
| debian/chmlib(Debian:14) | < 0.37-1 | 0.37-1 |
References
- 20051026 chmlib exploitable buffer overflow mailing-list
- morte.jedrea.com patch
- 17325 third-party-advisory vendor-advisory
- 17480 third-party-advisory vendor-advisory
- 17775 third-party-advisory vendor-advisory
- 17776 third-party-advisory vendor-advisory
- GLSA-200511-23 vendor-advisory
- SUSE-SR:2005:025 vendor-advisory
- 20335 vdb-entry
- 15211 patch vdb-entry
- www.sven-tantau.de patch vendor-advisory
- ADV-2005-2207 vdb-entry
- chmlib-chmdecompressblock-bo(22885) vdb-entry
- Debian Security Tracker CVE-2005-3318 vendor-advisory
- bugs.debian.org issue-tracking