CVE-2005-2930

2005-10-2821:02:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.029

Percentile

90.9%

JSON

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.

Affected configurations

Nvd

Node

jed_wingchm_libMatch0.1

jed_wingchm_libMatch0.2

jed_wingchm_libMatch0.3

jed_wingchm_libMatch0.31

jed_wingchm_libMatch0.32

jed_wingchm_libMatch0.33

jed_wingchm_libMatch0.35

VendorProductVersionCPE
jed_wingchm_lib0.1cpe:2.3:a:jed_wing:chm_lib:0.1:*:*:*:*:*:*:*
jed_wingchm_lib0.2cpe:2.3:a:jed_wing:chm_lib:0.2:*:*:*:*:*:*:*
jed_wingchm_lib0.3cpe:2.3:a:jed_wing:chm_lib:0.3:*:*:*:*:*:*:*
jed_wingchm_lib0.31cpe:2.3:a:jed_wing:chm_lib:0.31:*:*:*:*:*:*:*
jed_wingchm_lib0.32cpe:2.3:a:jed_wing:chm_lib:0.32:*:*:*:*:*:*:*
jed_wingchm_lib0.33cpe:2.3:a:jed_wing:chm_lib:0.33:*:*:*:*:*:*:*
jed_wingchm_lib0.35cpe:2.3:a:jed_wing:chm_lib:0.35:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jed_wing	chm_lib	0.1	cpe:2.3:a:jed_wing:chm_lib:0.1:::::::*
jed_wing	chm_lib	0.2	cpe:2.3:a:jed_wing:chm_lib:0.2:::::::*
jed_wing	chm_lib	0.3	cpe:2.3:a:jed_wing:chm_lib:0.3:::::::*
jed_wing	chm_lib	0.31	cpe:2.3:a:jed_wing:chm_lib:0.31:::::::*
jed_wing	chm_lib	0.32	cpe:2.3:a:jed_wing:chm_lib:0.32:::::::*
jed_wing	chm_lib	0.33	cpe:2.3:a:jed_wing:chm_lib:0.33:::::::*
jed_wing	chm_lib	0.35	cpe:2.3:a:jed_wing:chm_lib:0.35:::::::*