CVE-2008-5298: chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denia...

Security readout for executives and security teams

This is an old local denial-of-service issue in chm2pdf 0.9. A user on the same system could interfere with another user’s conversion job by abusing predictable temporary directory names. The evidence does not indicate remote compromise, data theft, privilege escalation, or active exploitation. Exposure is most likely on legacy Linux or Unix systems where chm2pdf 0.9 remains installed and multiple local users can run workloads. Single-user systems or systems without chm2pdf are unlikely to be affected. Treat this as low urgency unless chm2pdf is used on shared systems with untrusted local users. The realistic business impact is failed document conversion jobs, not confirmed data exposure or remote intrusion. Mitigation focus: Inventory systems for chm2pdf, especially legacy multi-user hosts.; Check Fedora, Debian, or vendor package guidance for fixed or replacement packages.; Remove chm2pdf where it is no longer business-required..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.