CVE-2005-2930

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-28 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.

Affected products

Jed Wing Chm Lib: 0.1, 0.2, 0.3, 0.31, 0.32, 0.33 (+1)

References

http://secunia.com/advisories/17775
http://securityreason.com/securityalert/125
http://securitytracker.com/id?1015120
http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities
http://www.securityfocus.com/bid/15234
http://www.vupen.com/english/advisories/2005/2249
http://secunia.com/advisories/17775
http://securityreason.com/securityalert/125
http://securitytracker.com/id?1015120
http://www.idefense.com/application/poi/display?id=332&type=vulnerabilities
http://www.securityfocus.com/bid/15234
http://www.vupen.com/english/advisories/2005/2249

Get alerted when CVE-2005-2930 or the next vulnerability affects your stack