CHMlib: User-assisted remote execution of arbitrary code

Background CHMlib is a library for the MS CHM Compressed HTML file format plus extracting and HTTP server utils. Description When certain CHM files that contain tables and objects stored in pages are parsed by CHMlib, an unsanitized value is passed to the alloca function resulting in a shift of t...

DEBIAN-CVE-2007-0619

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

CVE-2007-0619

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

CVE-2007-0619

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

Memory corruption

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

CVE-2007-0619

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

CVE-2007-0619

CVE-2007-0619 affects chmlib prior to 0.39. A crafted CHM file triggers memory corruption in the parser, allowing user-assisted remote code execution with the caller’s privileges. Multiple connected advisories (Gentoo GLSA 200702-12, openSUSE/SUSE advisories, Gentoo/Gentoo GLSA, and OSV entries) ...

CVE-2007-0619

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

CVE-2007-0619

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

CVE-2007-0619: Undefined Security Weakness

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

iDefense Security Advisory 01.26.07: Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability

Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability iDefense Security Advisory 01.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 26, 2007 I. BACKGROUND CHMlib is an open source library used to read Microsoft CHM, compressed HTML, files. CHM files were...

chmlib library memory corruption

Value from file is used directly in alloca function call...

Debian DSA-886-1 : chmlib - several vulnerabilities

Several vulnerabilities have been discovered in chmlib, a library for dealing with CHM format files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2659 Palasik Sandor discovered a buffer overflow in the LZX decompression method. - CVE-2005-2930 A...

Debian DSA-1144-1 : chmlib - missing input sanitising

It was discovered that one of the utilities shipped with chmlib, a library for dealing with Microsoft CHM files, performs insufficient sanitising of filenames, which might lead to directory traversal. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 1144-1] New chmlib packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1144-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2006 http://www.debian.org/security/faq -...

DSA-1144-1 chmlib - missing input sanitising

Bulletin has no description...

CVE-2006-3178: Undefined Security Weakness

Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...

CVE-2006-3178

CVE-2006-3178 affects CHM Lib (chmlib) prior to version 0.38. A directory traversal vulnerability in the extract_chmLib example/program allows an attacker to overwrite arbitrary files by including files with a “..” in a CHM archive filename. Public references describe Debian (DSA-1144-1) updates ...

GLSA-200511-23 : chmlib, KchmViewer: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200511-23 chmlib, KchmViewer: Stack-based buffer overflow Sven Tantau reported about a buffer overflow vulnerability in chmlib. The function 'chmdecompressblock' does not properly perform boundary checking, resulting in a...

chmlib, KchmViewer: Stack-based buffer overflow

Background chmlib is a library for dealing with Microsoft ITSS and CHM format files. KchmViewer is a CHM viewer that includes its own copy of the chmlib library. Description Sven Tantau reported about a buffer overflow vulnerability in chmlib. The function "chmdecompressblock" does not properly...