CVE-2006-2297: Microsoft Infotech Storage System Library

Medium severity, CVSS 4.0. EPSS: 19.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling.

Affected products

• Microsoft Infotech Storage System Library: any version

Published 2006-05-10. Last modified 2026-06-16.