CVE-2015-4467: The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interv...

Security readout for executives and security teams

CVE-2015-4467 is a denial-of-service flaw in libmspack before 0.5. A specially crafted CHM help file can trigger a divide-by-zero crash in software that uses the vulnerable library. The expected impact is application outage or interrupted file processing, not data theft or code execution based on the supplied sources. Exposure is most likely where servers, gateways, scanners, desktop tools, or content-processing pipelines parse CHM files using libmspack before 0.5. Products are not enumerated in the supplied sources, so affected downstream applications require local inventory confirmation. Prioritize remediation where CHM files are processed automatically or from external users. Business urgency is moderate because the cited impact is crash-based denial of service, with no supplied evidence of code execution or active exploitation. Mitigation focus: Upgrade libmspack to version 0.5 or later where available.; Apply the relevant distribution package update or vendor backport.; Limit CHM parsing from untrusted sources until patched..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.