iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability

Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability iDefense Security Advisory 10.28.05 www.idefense.com/application/poi/display?id=332&type=vulnerabilities October 28, 2005 I. BACKGROUND chmlib is a library for dealing with Microsoft ITSS/CHM format files. II. DESCRIPTION Remo...

CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

CVE-2005-2930

Summary: CVE-2005-2930 is a stack-based buffer overflow in chmlib’s _chm_find_in_PMGL, affecting chmlib and apps like KchmViewer. Exploitation could allow arbitrary code execution via crafted CHM files. The vulnerability is documented alongside CVE-2005-2659 and CVE-2005-3318 by Debian and Gentoo...

CVE-2005-2930

Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...

CVE-2005-3318

CVE-2005-3318 is a buffer overflow in CHMLIB’s _chm_decompress_block() used by chmlib (e.g., in KchmViewer). The vulnerability allows an attacker to execute arbitrary code by processing specially crafted CHM ITSS/CHM content. The issue is associated with CHMLIB versions before 0.37, and multiple ...

[Full-disclosure] chmlib exploitable buffer overflow

Advisory: chmlib exploitable buffer overflow Product: chmlib Affected Version: =0.36 Immune Version: 0.36 OS: Tested on linux 2.4 probably other OS affected as well Date: 26.10.2005 Author: Sven Tantau - http://www.sven-tantau.de/ Vendor-URL: http://morte.jedrea.com/7Ejedwin/projects/chmlib/...