CVE-2005-3318

2005-10-2710:02:00

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.029

Percentile

90.9%

JSON

Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.

Affected configurations

Nvd

Node

jed_wingchm_libMatch0.1

jed_wingchm_libMatch0.2

jed_wingchm_libMatch0.3

jed_wingchm_libMatch0.31

jed_wingchm_libMatch0.32

jed_wingchm_libMatch0.33

jed_wingchm_libMatch0.35

jed_wingchm_libMatch0.36

VendorProductVersionCPE
jed_wingchm_lib0.1cpe:2.3:a:jed_wing:chm_lib:0.1:*:*:*:*:*:*:*
jed_wingchm_lib0.2cpe:2.3:a:jed_wing:chm_lib:0.2:*:*:*:*:*:*:*
jed_wingchm_lib0.3cpe:2.3:a:jed_wing:chm_lib:0.3:*:*:*:*:*:*:*
jed_wingchm_lib0.31cpe:2.3:a:jed_wing:chm_lib:0.31:*:*:*:*:*:*:*
jed_wingchm_lib0.32cpe:2.3:a:jed_wing:chm_lib:0.32:*:*:*:*:*:*:*
jed_wingchm_lib0.33cpe:2.3:a:jed_wing:chm_lib:0.33:*:*:*:*:*:*:*
jed_wingchm_lib0.35cpe:2.3:a:jed_wing:chm_lib:0.35:*:*:*:*:*:*:*
jed_wingchm_lib0.36cpe:2.3:a:jed_wing:chm_lib:0.36:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jed_wing	chm_lib	0.1	cpe:2.3:a:jed_wing:chm_lib:0.1:::::::*
jed_wing	chm_lib	0.2	cpe:2.3:a:jed_wing:chm_lib:0.2:::::::*
jed_wing	chm_lib	0.3	cpe:2.3:a:jed_wing:chm_lib:0.3:::::::*
jed_wing	chm_lib	0.31	cpe:2.3:a:jed_wing:chm_lib:0.31:::::::*
jed_wing	chm_lib	0.32	cpe:2.3:a:jed_wing:chm_lib:0.32:::::::*
jed_wing	chm_lib	0.33	cpe:2.3:a:jed_wing:chm_lib:0.33:::::::*
jed_wing	chm_lib	0.35	cpe:2.3:a:jed_wing:chm_lib:0.35:::::::*
jed_wing	chm_lib	0.36	cpe:2.3:a:jed_wing:chm_lib:0.36:::::::*