Jed Wing CHM Lib Stack Buffer Overflow Vulnerability
BID:15211
Info
Jed Wing CHM Lib Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 15211 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-3318 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2005 12:00AM |
| Updated: | Oct 26 2005 12:00AM |
| Credit: | Sven Tantau discovered this vulnerability. |
| Vulnerable: |
S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Personal 10.0 OSS Jed Wing CHM lib 0.36 Jed Wing CHM lib 0.35 Jed Wing CHM lib 0.33 Jed Wing CHM lib 0.32 Jed Wing CHM lib 0.31 Jed Wing CHM lib 0.3 Jed Wing CHM lib 0.2 Jed Wing CHM lib 0.1 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: |
Jed Wing CHM lib 0.37 |
Discussion
Jed Wing CHM Lib Stack Buffer Overflow Vulnerability
CHM lib is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the library to properly bounds check input data prior to copying it into an insufficiently sized memory buffer.
This issue allows attackers to execute arbitrary machine code in the context of the application that utilizes the CHM lib library.
This issue is present in versions 0.36 and prior of the library.
CHM lib is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the library to properly bounds check input data prior to copying it into an insufficiently sized memory buffer.
This issue allows attackers to execute arbitrary machine code in the context of the application that utilizes the CHM lib library.
This issue is present in versions 0.36 and prior of the library.
Exploit / POC
Jed Wing CHM Lib Stack Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Jed Wing CHM Lib Stack Buffer Overflow Vulnerability
Solution:
The vendor has released version 0.37 of CHM lib to address this issue:
SUSE has released advisory SUSE-SR:2005:025 to address this, and other issues in various packages, in various SUSE products. Please see the referenced advisory for further information.
Debian has released advisory DSA 886-1 to address this issue. Please see the referenced advisory for more information.
Gentoo has released advisory GLSA 200511-23 to address this issue. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to update their computers:
All chmlib users:
emerge --sync
emerge --ask --oneshot --verbose ">=app-doc/chmlib-0.37.4"
All KchmViewer users:
emerge --sync
emerge --ask --oneshot --verbose ">=app-doc/kchmviewer-1.1"
Jed Wing CHM lib 0.1
Jed Wing CHM lib 0.2
Jed Wing CHM lib 0.3
Jed Wing CHM lib 0.31
Jed Wing CHM lib 0.32
Jed Wing CHM lib 0.33
Jed Wing CHM lib 0.35
Jed Wing CHM lib 0.36
Solution:
The vendor has released version 0.37 of CHM lib to address this issue:
SUSE has released advisory SUSE-SR:2005:025 to address this, and other issues in various packages, in various SUSE products. Please see the referenced advisory for further information.
Debian has released advisory DSA 886-1 to address this issue. Please see the referenced advisory for more information.
Gentoo has released advisory GLSA 200511-23 to address this issue. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to update their computers:
All chmlib users:
emerge --sync
emerge --ask --oneshot --verbose ">=app-doc/chmlib-0.37.4"
All KchmViewer users:
emerge --sync
emerge --ask --oneshot --verbose ">=app-doc/kchmviewer-1.1"
Jed Wing CHM lib 0.1
-
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
Jed Wing CHM lib 0.2
-
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
Jed Wing CHM lib 0.3
-
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
Jed Wing CHM lib 0.31
-
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
Jed Wing CHM lib 0.32
-
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
Jed Wing CHM lib 0.33
-
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
Jed Wing CHM lib 0.35
-
Debian chmlib-bin_0.35-6sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_alpha.deb -
Debian chmlib-bin_0.35-6sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_amd64.deb -
Debian chmlib-bin_0.35-6sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_arm.deb -
Debian chmlib-bin_0.35-6sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_hppa.deb -
Debian chmlib-bin_0.35-6sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_i386.deb -
Debian chmlib-bin_0.35-6sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_ia64.deb -
Debian chmlib-bin_0.35-6sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_m68k.deb -
Debian chmlib-bin_0.35-6sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_mips.deb -
Debian chmlib-bin_0.35-6sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_mipsel.deb -
Debian chmlib-bin_0.35-6sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_powerpc.deb -
Debian chmlib-bin_0.35-6sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_s390.deb -
Debian chmlib-bin_0.35-6sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge1_sparc.deb -
Debian chmlib-dev_0.35-6sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_alpha.deb -
Debian chmlib-dev_0.35-6sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_amd64.deb -
Debian chmlib-dev_0.35-6sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_arm.deb -
Debian chmlib-dev_0.35-6sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_hppa.deb -
Debian chmlib-dev_0.35-6sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_i386.deb -
Debian chmlib-dev_0.35-6sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_ia64.deb -
Debian chmlib-dev_0.35-6sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_m68k.deb -
Debian chmlib-dev_0.35-6sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_mips.deb -
Debian chmlib-dev_0.35-6sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_mipsel.deb -
Debian chmlib-dev_0.35-6sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_powerpc.deb -
Debian chmlib-dev_0.35-6sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_s390.deb -
Debian chmlib-dev_0.35-6sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge1_sparc.deb -
Debian chmlib_0.35-6sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_alpha.deb -
Debian chmlib_0.35-6sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_amd64.deb -
Debian chmlib_0.35-6sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_arm.deb -
Debian chmlib_0.35-6sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_hppa.deb -
Debian chmlib_0.35-6sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_i386.deb -
Debian chmlib_0.35-6sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_ia64.deb -
Debian chmlib_0.35-6sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_m68k.deb -
Debian chmlib_0.35-6sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_mips.deb -
Debian chmlib_0.35-6sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_mipsel.deb -
Debian chmlib_0.35-6sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_powerpc.deb -
Debian chmlib_0.35-6sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_s390.deb -
Debian chmlib_0.35-6sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge1_sparc.deb -
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
Jed Wing CHM lib 0.36
-
Jed Wing chmlib-0.37.tgz
http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.37.tgz
References
Jed Wing CHM Lib Stack Buffer Overflow Vulnerability
References:
References:
- Advisory: chmlib exploitable buffer overflow (Sven Tantau
) - CHM lib Home Page (Jed Wing)