Buffer overflow in Jed Wing Chm Lib

CVE-2005-2930

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.

Vulnerability class: Buffer Overflow

EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.

Affected products

Jed_wing Chm_lib — versions 0.1, 0.2, 0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)