45 matches found
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
AZL-35324 CVE-2021-33391 affecting package tidy for versions less than 5.8.0-6
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
DEBIAN-CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
Design/Logic Flaw
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
UBUNTU-CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
CVE-2021-33391
CVE-2021-33391 affects HTACG HTML Tidy v5.7.28. The flaw allows remote attackers to execute arbitrary code via the -g option in the CleanNode() function (gdoc.c), with CVSS v3.1 base score 9.8 (CRITICAL). Affected installations include tidy-html5 packages older than patched versions; multiple adv...
CVE-2021-33391: Use After Free
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
HTACG HTML Tidy 资源管理错误漏洞
HTACG HTML Tidy is an open source HTML tool from the HTML Tidy Advocacy Community Group. A security vulnerability in HTACG HTML Tidy v5.7.28 exists that allows an attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c. The vulnerability is caused by a security fl...
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
CVE-2021-33391
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c...
PT-2021-8281
Name of the Vulnerable Software and Affected Versions HTACG HTML Tidy version 5.7.28 Description The issue allows an attacker to execute arbitrary code via the -g option of the CleanNode function in gdoc.c. This is related to a use-after-free vulnerability in the CleanNode function of the gdoc.c...
Ubuntu: Security Advisory (USN-2695-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : HTML Tidy vulnerabilities (USN-2695-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2695-1 advisory. Fernando Muoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data,...
USN-2695-1: HTML Tidy vulnerabilities
Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly execute arbitrary code...
USN-2695-1 tidy vulnerabilities
Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly execute arbitrary code...