CVE-2007-0619 chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption.
HighCVSS 9.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chmlib | <= 0.38 | No fix listed |
| debian/chmlib(Debian:12) | < 2:0.39-1 | 2:0.39-1 |
| debian/chmlib(Debian:13) | < 2:0.39-1 | 2:0.39-1 |
| debian/chmlib(Debian:14) | < 2:0.39-1 | 2:0.39-1 |
References
- 20070126 Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability third-party-advisory
- morte.jedrea.com patch
- 23975 third-party-advisory vendor-advisory
- 24335 third-party-advisory
- GLSA-200702-12 vendor-advisory
- 1017565 vdb-entry
- SUSE-SR:2007:003 vendor-advisory
- 22258 vdb-entry
- ADV-2007-0361 vdb-entry
- Debian Security Tracker CVE-2007-0619 vendor-advisory
- bugs.debian.org issue-tracking