Vendor/product archive

karakas-online / chm2pdf CVEs

Beta · best-effort

2 CVEs tagged to karakas-online / chm2pdf — 0 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to karakas-online vendor archive

CVE-2008-5299

Published Dec 1, 2008

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the (1) /tmp/chm2pdf/work or (2) /tmp/chm2pdf/orig temporary directori…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-5298

Published Dec 1, 2008

chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those director…

CVSS 2.1 · Low

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1