CVE-2008-5298
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to...
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
Exploit likelihood
What each source reports
NVD Score used
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
- Record
CVE-2008-5298- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
- Record
CVE-2008-5298- Updated
- 2026-11-02
EUVDEUVD-2008-5275 No score
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
- Record
EUVD-2008-5275- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3h2g-4ppf-wwf9 No score
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to...
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
- Record
GHSA-3h2g-4ppf-wwf9- Updated
- 2026-11-02
OSV No score
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
- Record
CVE-2008-5298- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5298 is a low vulnerability (CVSS 2.1) in Karakas-online Chm2pdf, published December 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. No source names a fixed version.