CVE-2005-2930
chm_lib - Stack-based Buffer Overflow in _chm_find_in_PMGL Function
Title source: llmDescription
Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.
References (6)
Core 6
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15234
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/125
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17775
Patch, Vendor Advisory third-party-advisory
x_refsource_idefense
http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2249
Patch, Vendor Advisory vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015120
Scores
EPSS
0.0253
EPSS Percentile
83.1%
Details
CWE
CWE-119
Status
published
Products (7)
jed_wing/chm_lib
0.1
jed_wing/chm_lib
0.2
jed_wing/chm_lib
0.3
jed_wing/chm_lib
0.31
jed_wing/chm_lib
0.32
jed_wing/chm_lib
0.33
jed_wing/chm_lib
0.35
Published
Oct 28, 2005
Tracked Since
Feb 18, 2026