CVE-2005-2930

Medium

Description

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.

SeverityMedium
CVSS5.1
Exploit probability—
ProductJed Wing Chm Lib
PublishedOct 28, 2005
First seenOct 28, 2005

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
jed_wing chm_lib0.1, 0.2, 0.3, 0.31, 0.32, 0.33, 0.35—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.