PT-2005-3547 · Chmlib · Chmlib

Palasik Sandor · Publicado 2005-11-16 · Atualizado 2008-09-10 · CVE-2005-2659

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions chmlib version 0.35

Description A buffer overflow issue exists in the LZX decompression of chmlib, which may have unknown impact and attack vectors. This issue is related to the LZX decompression functionality.

Recommendations For chmlib version 0.35, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2659

DSA-886-1

Produtos afetados

Chmlib

Referências · 10

• http://securityfocus.com/bid/15338 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2659 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2659 · Aviso do Fabricante
• http://mail-index.netbsd.org/pkgsrc-changes/2005/09/12/0010.html · Nota
• http://secunia.com/advisories/17325 · Nota
• http://secunia.com/advisories/17775 · Aviso do Fabricante
• http://debian.org/security/2005/dsa-886 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-2659 · Aviso do Fabricante
• http://secunia.com/advisories/17494 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2659 · Aviso do Fabricante