CVE-2015-4469
EPSS 0.38%Published: 6/11/2015Modified: 4/28/2026
Description
The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted CHM file.
Affected packages (1)
- Debian/libmspackfrom 0, < 0.4-3