PatchTheCVEchm lib vulnerabilities and fixes
Recent CVEs affecting chm lib, with upgrade or downgrade steps. 4 tracked.
Also searched as: chmlib.
chm lib has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-06-23. Highest priority: CVE-2005-2659 (score 61/100).
- CVE-2006-3178 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows rem
- CVE-2005-3318 MEDIUM 5.1 DOWNGRADE Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products suc
- CVE-2005-2930 MEDIUM 5.1 DOWNGRADE Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in
- CVE-2005-2659 HIGH 10.0 DOWNGRADE Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has
FAQ
How do I fix chm lib vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chm lib being exploited right now?
None of the tracked chm lib CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chm lib CVE should I patch first?
CVE-2005-2659 currently ranks highest (61/100): Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has.