CVE-2005-2930

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.

• CWE-119

• http://secunia.com/advisories/17775Patch, Vendor Advisory
• http://securityreason.com/securityalert/125
• http://securitytracker.com/id?1015120Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=332&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.securityfocus.com/bid/15234Patch
• http://www.vupen.com/english/advisories/2005/2249Vendor Advisory
• http://secunia.com/advisories/17775Patch, Vendor Advisory
• http://securityreason.com/securityalert/125
• http://securitytracker.com/id?1015120Patch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=332&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.securityfocus.com/bid/15234Patch
• http://www.vupen.com/english/advisories/2005/2249Vendor Advisory

Published

Oct 28, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2922Heap-based buffer overflow in the embedded player in multipl…
• CVE-2005-2923The IMAP server in IMail Server 8.20 in Ipswitch Collaborati…
• CVE-2005-2925runpriv in SGI IRIX allows local users to bypass intended re…
• CVE-2005-2926Stack-based buffer overflow in (1) backupsh and (2) authsh i…
• CVE-2005-2927Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and…
• CVE-2005-2929Lynx 2.8.5, and other versions before 2.8.6dev.15, allows re…
• CVE-2005-2931Format string vulnerability in the SMTP service in IMail Ser…
• CVE-2005-2932Multiple Check Point Zone Labs ZoneAlarm products before 7.0…
• CVE-2005-2933Buffer overflow in the mail_valid_net_parse_work function in…
• CVE-2005-2934Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 an…
• CVE-2005-2935Unquoted Windows search path vulnerability in Microsoft Anti…
• CVE-2005-2936Unquoted Windows search path vulnerability in RealNetworks R…