PT-2005-3547 · Chmlib · Chmlib

Palasik Sandor · Published 2005-11-16 · Updated 2008-09-10 · CVE-2005-2659

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions chmlib version 0.35

Description A buffer overflow issue exists in the LZX decompression of chmlib, which may have unknown impact and attack vectors. This issue is related to the LZX decompression functionality.

Recommendations For chmlib version 0.35, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2659

DSA-886-1

Affected Products

Chmlib

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2005-2659 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2659 · Vendor Advisory
• http://secunia.com/advisories/17775 · Vendor Advisory
• http://debian.org/security/2005/dsa-886 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-2659 · Vendor Advisory
• http://secunia.com/advisories/17494 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2659 · Vendor Advisory
• http://securityfocus.com/bid/15338 · Note
• http://mail-index.netbsd.org/pkgsrc-changes/2005/09/12/0010.html · Note
• http://secunia.com/advisories/17325 · Note