87 matches found
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2007-0619
CVE-2007-0619 affects chmlib prior to 0.39. A crafted CHM file triggers memory corruption in the parser, allowing user-assisted remote code execution with the caller’s privileges. Multiple connected advisories (Gentoo GLSA 200702-12, openSUSE/SUSE advisories, Gentoo/Gentoo GLSA, and OSV entries) ...
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
chmlib library memory corruption
Value from file is used directly in alloca function call...
iDefense Security Advisory 01.26.07: Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability
Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability iDefense Security Advisory 01.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 26, 2007 I. BACKGROUND CHMlib is an open source library used to read Microsoft CHM, compressed HTML, files. CHM files were...
Debian DSA-886-1 : chmlib - several vulnerabilities
Several vulnerabilities have been discovered in chmlib, a library for dealing with CHM format files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2659 Palasik Sandor discovered a buffer overflow in the LZX decompression method. - CVE-2005-2930 A...
Debian DSA-1144-1 : chmlib - missing input sanitising
It was discovered that one of the utilities shipped with chmlib, a library for dealing with Microsoft CHM files, performs insufficient sanitising of filenames, which might lead to directory traversal. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
[SECURITY] [DSA 1144-1] New chmlib packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1144-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2006 http://www.debian.org/security/faq -...
DSA-1144-1 chmlib - missing input sanitising
Bulletin has no description...
CVE-2006-3178
CVE-2006-3178 affects CHM Lib (chmlib) prior to version 0.38. A directory traversal vulnerability in the extract_chmLib example/program allows an attacker to overwrite arbitrary files by including files with a “..” in a CHM archive filename. Public references describe Debian (DSA-1144-1) updates ...
GLSA-200511-23 : chmlib, KchmViewer: Stack-based buffer overflow
The remote host is affected by the vulnerability described in GLSA-200511-23 chmlib, KchmViewer: Stack-based buffer overflow Sven Tantau reported about a buffer overflow vulnerability in chmlib. The function 'chmdecompressblock' does not properly perform boundary checking, resulting in a...
chmlib, KchmViewer: Stack-based buffer overflow
Background chmlib is a library for dealing with Microsoft ITSS and CHM format files. KchmViewer is a CHM viewer that includes its own copy of the chmlib library. Description Sven Tantau reported about a buffer overflow vulnerability in chmlib. The function "chmdecompressblock" does not properly...
DEBIAN-CVE-2005-2659
Buffer overflow in the LZX decompression in CHM Lib chmlib 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors...
CVE-2005-2659
CVE-2005-2659 is a buffer overflow in the LZX decompression path of CHM Lib (chmlib) 0.35, used by KchmViewer. Root cause: overflow in LZX decompression. The impact and attack vectors are described as unknown in initial sources; later advisories (Debian DSA-886-1 and related OpenVAS entries) refe...
[SECURITY] [DSA 886-1] New chmlib packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 886-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 886-1] New chmlib packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 886-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...
DSA-886-1 chmlib - several
Bulletin has no description...
iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability
Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability iDefense Security Advisory 10.28.05 www.idefense.com/application/poi/display?id=332&type=vulnerabilities October 28, 2005 I. BACKGROUND chmlib is a library for dealing with Microsoft ITSS/CHM format files. II. DESCRIPTION Remo...