CVE-2005-2930: Jed Wing Chm Lib

Medium severity, CVSS 5.1. EPSS: 2.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.

Affected products

• Jed Wing Chm Lib: version 0.1 only; version 0.2 only; version 0.3 only; version 0.31 only; version 0.32 only; version 0.33 only; …

Published 2005-10-28. Last modified 2026-06-16.