chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption.
CVSS Score
9.3
EPSS Score
0.102
Published
2007-01-31