CVE-2005-2930

Опубликовано: 28 окт. 2005

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.

Ссылки

http://secunia.com/advisories/17775
Patch
Vendor Advisory
http://securityreason.com/securityalert/125
http://securitytracker.com/id?1015120
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15234
Patch
http://www.vupen.com/english/advisories/2005/2249
Vendor Advisory
http://secunia.com/advisories/17775
Patch
Vendor Advisory
http://securityreason.com/securityalert/125
http://securitytracker.com/id?1015120
Patch
Vendor Advisory
http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15234
Patch
http://www.vupen.com/english/advisories/2005/2249
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jed_wing:chm_lib:0.1:*:*:*:*:*:*:*

cpe:2.3:a:jed_wing:chm_lib:0.2:*:*:*:*:*:*:*

cpe:2.3:a:jed_wing:chm_lib:0.3:*:*:*:*:*:*:*

cpe:2.3:a:jed_wing:chm_lib:0.31:*:*:*:*:*:*:*

cpe:2.3:a:jed_wing:chm_lib:0.32:*:*:*:*:*:*:*

cpe:2.3:a:jed_wing:chm_lib:0.33:*:*:*:*:*:*:*

cpe:2.3:a:jed_wing:chm_lib:0.35:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02078

Низкий

5.1 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2005-2930

ubuntu

почти 20 лет назад

CVE-2005-2930

debian

почти 20 лет назад

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_l ...

GHSA-q649-mpgj-7h68

github

больше 3 лет назад

EPSS

Процентиль: 83%

0.02078

Низкий

5.1 Medium

CVSS2

Дефекты

CWE-119