openSUSE 10 Security Update : chmlib (chmlib-2595)

This update of chmlib fixes a vulnerability that allowed the execution of arbitrary code. CVE-2007-0619 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update chmlib-2595. The text description of thi...

CVE-2007-0619

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...

CVE-2007-0619

CVE-2007-0619 affects chmlib prior to 0.39. A crafted CHM file triggers memory corruption in the parser, allowing user-assisted remote code execution with the caller’s privileges. Multiple connected advisories (Gentoo GLSA 200702-12, openSUSE/SUSE advisories, Gentoo/Gentoo GLSA, and OSV entries) ...