Description
Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | chmlib | 0.37-1 | — |
| Debian 13 | chmlib | 0.37-1 | — |
| Debian 12 | chmlib | 0.37-1 | — |
| Debian 3.1 | chmlib | 0.35-6sarge1 | DSA-886-1 |
Advisories 1
- DSA-886-1 chmlib - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20051026 chmlib exploitable buffer overflow mailing-list
- 17480 third-party-advisory
- 17775 third-party-advisory
- ADV-2005-2207 vdb-entry
- SUSE-SR:2005:025 vendor-advisory
- 15211 vdb-entry
- chmlib-chmdecompressblock-bo(22885) vdb-entry
- 20335 vdb-entry
- 17325 third-party-advisory
- 17776 third-party-advisory
- http://www.sven-tantau.de/public_files/chmlib/chmlib_20051126.txt
- GLSA-200511-23 vendor-advisory
- http://morte.jedrea.com/~jedwin/projects/chmlib/