This page lists publicly disclosed CVE vulnerabilities affecting jed_wing chm_lib (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2006-3178 | Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. (dot dot) in their filename. | [email protected] | 5.0 | 2.06% | 2006-06-23 | 2026-04-16 |
| CVE-2005-2659 | Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors. | [email protected] | 10.0 | 1.00% | 2005-11-16 | 2026-04-16 |
| CVE-2005-2930 | Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318. | [email protected] | 5.1 | 2.08% | 2005-10-28 | 2026-04-16 |
| CVE-2005-3318 | Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930. | [email protected] | 5.1 | 2.96% | 2005-10-27 | 2026-04-16 |