Lucene search
K

64 matches found

Cvelist
Cvelist
added 2022/05/09 4:52 p.m.16 views

CVE-2022-27114

There is a vulnerability in htmldoc 1.9.16. In imageloadjpeg function image.cxx when it calls malloc,'img-width' and 'img-height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer...

6.1AI score0.00196EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/04/04 12:0 a.m.1 views

HTMLDOC 安全漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC version 1.9.14, which stems from an infinite loop in the application's gifreadlzw function that can cause a pointer to arbitrarily...

5.5CVSS7AI score0.00082EPSS
Exploits1References4
OSV
OSV
added 2022/03/16 3:15 p.m.1 views

UBUNTU-CVE-2021-23165

A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdfprepareoutpages, in ps-pdf.cxx may lead to execute arbitrary code and denial of service...

9.8CVSS7.7AI score0.00405EPSS
Exploits1References6
OSV
OSV
added 2022/03/16 3:15 p.m.0 views

UBUNTU-CVE-2021-23158

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

9.8CVSS7.4AI score0.00331EPSS
Exploits1References5
NVD
NVD
added 2022/03/02 11:15 p.m.18 views

CVE-2021-23180

A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in fileextension,in file.c may lead to execute arbitrary code and denial of service...

7.8CVSS0.00278EPSS
Exploits1References4
OSV
OSV
added 2022/03/02 11:15 p.m.1 views

DEBIAN-CVE-2021-23180

A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in fileextension,in file.c may lead to execute arbitrary code and denial of service...

7.8CVSS7.9AI score0.00278EPSS
Exploits1References1
OSV
OSV
added 2022/03/02 11:15 p.m.0 views

UBUNTU-CVE-2021-23206

A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parsetable in ps-pdf.cxx may lead to execute arbitrary code and denial of service...

7.8CVSS7.6AI score0.0034EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2022/02/09 11:15 p.m.3 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS5.8AI score0.00142EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/02/09 10:3 p.m.37 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS5.7AI score0.00142EPSS
Exploits1
OSV
OSV
added 2022/01/25 12:13 p.m.7 views

MGASA-2022-0033 Updated htmldoc packages fix security vulnerability

The updated packages fix a crash when clicking the button "Generate" and a security vulnerability: A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. CVE-2021-43579...

7.8CVSS7.9AI score0.05615EPSS
Exploits4References3
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.0 views

The vulnerability of the htmldoc web page transformation software, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the htmldoc web page conversion software is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS0.0039EPSS
Exploits1References8Affected Software5
Veracode
Veracode
added 2021/11/11 4:8 a.m.30 views

Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists due to a buffer overflow...

5.5CVSS2AI score0.00101EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/11/03 5:15 p.m.1 views

DEBIAN-CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

5.5CVSS5.7AI score0.00101EPSS
Exploits1References1
Veracode
Veracode
added 2021/06/13 7:5 a.m.22 views

Denial Of Service (DoS)

htmldoc is vulnerable to denial of attack. The vulnerability exists due to a heap-based buffer overflow in rendertablerow in ps-pdf.cxx...

7.8CVSS2.4AI score0.00166EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2021/06/12 6:28 p.m.37 views

Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference in the function imageloadjpeg in image.cxx...

7.8CVSS1.8AI score0.00162EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2021/06/10 12:0 a.m.3 views

HTMLDOC 代码问题漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript, and PDF formats.HTMLDOC is vulnerable to an input validation error, which stems from insufficient validation of user-supplied input. A remote attacker could exploit the vulnerability to pass...

7.8CVSS5.7AI score0.00162EPSS
Exploits1References9
OSV
OSV
added 2021/06/03 12:0 a.m.2 views

UBUNTU-CVE-2021-23180

A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in fileextension,in file.c may lead to execute arbitrary code and denial of service...

7.8CVSS7.4AI score0.00278EPSS
Exploits1References5
Veracode
Veracode
added 2021/05/12 12:58 a.m.24 views

Remote Code Execution (RCE)

htmldoc is vulnerable to remote code execution. The vulnerability exists due to an integer overflow...

9.8CVSS2.8AI score0.0039EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2021/04/06 12:0 a.m.5 views

HTMLDOC Integer Overflow Vulnerability

HTMLDOC is an HTML file format conversion editor that reads HTML and Markdown source files or web pages and generates the corresponding EPUB, HTML, PostScript or PDF files with optional table of contents. An integer overflow vulnerability exists in HTMLDOC 1.9.11 and earlier versions. An attacker...

9.8CVSS7.6AI score0.0039EPSS
Exploits1References1
Prion
Prion
added 2021/04/05 10:15 p.m.22 views

Integer overflow

Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181...

7.5CVSS8.9AI score0.00705EPSS
Exploits1References3Affected Software2
Rows per page
Query Builder