BID:15234

Jed Wing CHM Lib _chm_find_in_PMGL Stack Buffer Overflow Vulnerability

Info

Jed Wing CHM Lib _chm_find_in_PMGL Stack Buffer Overflow Vulnerability

Bugtraq ID:	15234
Class:	Boundary Condition Error
CVE:	CVE-2005-2930
Remote:	Yes
Local:	No
Published:	Oct 28 2005 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	The discoverer of this issue wishes to remain anonymous.
Vulnerable:	Jed Wing CHM lib 0.36 Jed Wing CHM lib 0.35 Jed Wing CHM lib 0.33 Jed Wing CHM lib 0.32 Jed Wing CHM lib 0.31 Jed Wing CHM lib 0.3 Jed Wing CHM lib 0.2 Jed Wing CHM lib 0.1 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1

Not Vulnerable:	Jed Wing CHM lib 0.37 Jed Wing CHM lib 0.36

Discussion

Jed Wing CHM Lib _chm_find_in_PMGL Stack Buffer Overflow Vulnerability

CHM lib is susceptible to a buffer overflow vulnerability. This issue is due to a failure of the library to properly bounds check input data prior to copying it into an insufficiently sized memory buffer.

This issue allows attackers to execute arbitrary machine code in the context of the application that utilizes the CHM lib library.

This issue is present in versions 0.35; other versions may also be affected.

Exploit / POC

Jed Wing CHM Lib _chm_find_in_PMGL Stack Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Jed Wing CHM Lib _chm_find_in_PMGL Stack Buffer Overflow Vulnerability

Solution:
The vendor has released version 0.36 of CHM lib to address this issue.

Debian has released advisory DSA 886-1 to address this issue. Please see the referenced advisory for more information.

Jed Wing CHM lib 0.1