CVE-2005-3318: Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products...

Security readout for executives and security teams

CVE-2005-3318 is an old memory-safety flaw in chmlib, a library for reading CHM help files. A malicious CHM file could trigger a buffer overflow and potentially run attacker-controlled code in software that uses vulnerable chmlib versions before 0.37. Exposure is most likely on endpoints or applications that open untrusted CHM files through chmlib before 0.37. Inventory may need dependency-level review because chmlib can be embedded in viewer applications. Server risk depends on whether user-supplied CHM content is parsed. Prioritize remediation where CHM files can arrive from outside the organization or be opened by users. The issue is old, but arbitrary code execution in file parsers can still matter when legacy packages remain installed. Mitigation focus: Identify software using chmlib before version 0.37.; Upgrade chmlib or vendor packages to non-vulnerable versions where available.; Review vendor advisories for distribution-specific fixed packages..

Prepared

Jun 29, 2026, 17:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.