CVE-2008-5298 chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| karakas-online chm2pdf | = 0.9 | No fix listed |
| debian/chm2pdf(Debian:10) | < 0.9.1-1.1 | 0.9.1-1.1 |
References
- bugs.debian.org
- FEDORA-2011-0467 vendor-advisory
- FEDORA-2011-0454 vendor-advisory
- 32257 third-party-advisory vendor-advisory
- 43109 third-party-advisory vendor-advisory
- 31735 vdb-entry
- ADV-2011-0236 vdb-entry vendor-advisory
- chm2pdf-chm2pdf-symlink(45813) vdb-entry
- chm2pdf-files-dos(47030) vdb-entry