CVE-2008-5299: Karakas-Online CHM2PDF

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the (1) /tmp/chm2pdf/work or (2) /tmp/chm2pdf/orig temporary directories.

Affected products

• Karakas-Online CHM2PDF: version 0.9 only

Published 2008-12-01. Last modified 2026-06-16.