CVE-2005-2930: Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used...

Security readout for executives and security teams

CVE-2005-2930 is a memory corruption flaw in old chmlib versions used to read CHM help files. If a user opens a malicious CHM file in an affected application, the attacker may be able to run code as that user. Exposure is most likely in legacy Linux or Unix desktop environments, embedded products, or packaged applications that still bundle chmlib before 0.36 and open CHM files. Treat this as a legacy exposure cleanup with high impact if reachable. Prioritize environments where users can open CHM files from email, browsers, or shared storage. Mitigation focus: Inventory systems and applications that include chmlib or open CHM files.; Upgrade chmlib to 0.36 or later where vendor packaging supports it.; Update or retire applications bundling vulnerable chmlib versions, including CHM viewers..

Prepared

Jun 29, 2026, 17:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.