PT-2008-6426 · Chm2Pdf · Chm2Pdf

Karol Lewandowski · Publicado 2008-12-01 · Atualizado 2017-08-08 · CVE-2008-5298

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions chm2pdf version 0.9

Description The issue allows local users to cause a denial of service by creating directories with fixed names that chm2pdf uses for temporary files, leading to chm2pdf failure for other users.

Recommendations For version 0.9, consider restricting access to the directories where chm2pdf creates temporary files to prevent unauthorized users from creating these directories and causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-5298

Produtos afetados

Chm2Pdf

Referências · 11

• http://secunia.com/advisories/32257 · Nota
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0236 · Nota
• https://osv.dev/vulnerability/CVE-2008-5298 · Aviso do Fabricante
• http://secunia.com/advisories/43109 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47030 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html · Aviso do Fabricante
• http://securityfocus.com/bid/31735 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5298 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45813 · Nota