Lucene search

K
cvelistRedhatCVELIST:CVE-2009-3627
HistoryOct 29, 2009 - 2:00 p.m.

CVE-2009-3627

2009-10-2914:00:00
redhat
www.cve.org
1

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.7%

The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.7%