Jed Wing : Security Vulnerabilities, CVEs,
Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. (dot dot) in their filename.
Max CVSS
5.0
EPSS Score
0.57%
Published
2006-06-23
Updated
2017-07-20
Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.
Max CVSS
5.1
EPSS Score
2.93%
Published
2005-10-27
Updated
2017-07-19
Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.
Max CVSS
5.1
EPSS Score
1.00%
Published
2005-10-28
Updated
2011-08-02
Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors.
Max CVSS
10.0
EPSS Score
0.58%
Published
2005-11-16
Updated
2008-09-10
4 vulnerabilities found