Bug 225919 (CVE-2007-0619)

Summary:	CVE-2007-0619: chmlib < 0.3.9 arbitrary code execution
Product:	[Fedora] Fedora	Reporter:	Ville Skyttä <ville.skytta>
Component:	chmlib	Assignee:	Peter Lemenkov <lemenkov>
Status:	CLOSED NEXTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6	CC:	fedora-security-list
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-02-01 12:25:26 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ville Skyttä 2007-01-31 19:08:00 UTC

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-0619

"chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary
code via a crafted page block length in a CHM file, which triggers memory
corruption."

FC5+ seemingly affected.

Comment 1 Peter Lemenkov 2007-02-01 12:25:26 UTC

Thanks for mentioning this.
I uploaded new version into FE several minutes ago. Let's wait a little )