Lucene search
K

469 matches found

CNNVD
CNNVD
added 2022/02/09 12:0 a.m.1 views

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in htmldoc, which originates from a stack out-of-bounds read/write occurring in gif get code, which can be exploited by an attacker to cause a...

5.5CVSS5.7AI score0.00142EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.19 views

Mageia: Security Advisory (MGASA-2022-0014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00101EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2021-0332)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.9AI score0.00405EPSS
Exploits8References6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.21 views

Mageia: Security Advisory (MGASA-2022-0033)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.05615EPSS
Exploits4References4
Mageia
Mageia
added 2022/01/25 12:13 p.m.36 views

Updated htmldoc packages fix security vulnerability

The updated packages fix a crash when clicking the button "Generate" and a security vulnerability: A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. CVE-2021-43579...

7.8CVSS1.8AI score0.05615EPSS
Exploits4References2
OSV
OSV
added 2022/01/25 12:13 p.m.7 views

MGASA-2022-0033 Updated htmldoc packages fix security vulnerability

The updated packages fix a crash when clicking the button "Generate" and a security vulnerability: A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. CVE-2021-43579...

7.8CVSS7.9AI score0.05615EPSS
Exploits4References3
Positive Technologies
Positive Technologies
added 2022/01/21 12:0 a.m.2 views

PT-2022-18230 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.16 Description: The issue arises in the image load jpeg function within image.cxx when it calls malloc. The img-width and img-height values are large enough to cause an integer overflow. As a result, the malloc function ma...

9.8CVSS6.2AI score0.01039EPSS
Exploits9References59
OpenVAS
OpenVAS
added 2022/01/20 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2022:14877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.05615EPSS
Exploits4References2
OSV
OSV
added 2022/01/19 4:58 p.m.5 views

SUSE-SU-2022:14877-1 Security update for htmldoc

This update for htmldoc fixes the following issues: - CVE-2021-43579: Fixed stack-based buffer overflow in imageloadbmp resulting in remote code execution if the victim converts an HTML document linking to a crafted BMP file. bsc1194487...

7.8CVSS8AI score0.05615EPSS
Exploits4References3
OSV
OSV
added 2022/01/15 8:9 a.m.6 views

MGASA-2022-0014 Updated htmldoc packages fix security vulnerability

Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985...

5.5CVSS5.5AI score0.00101EPSS
Exploits1References3
Mageia
Mageia
added 2022/01/15 8:9 a.m.28 views

Updated htmldoc packages fix security vulnerability

Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985...

5.5CVSS4AI score0.00101EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.7 views

PT-2022-13245 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.15 Description: A vulnerability was found in htmldoc where the stack out-of-bounds read takes place in the gif get code function and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

9.8CVSS6.6AI score0.05615EPSS
Exploits19References87
OSV
OSV
added 2022/01/10 2:10 p.m.0 views

DEBIAN-CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS8.5AI score0.05615EPSS
Exploits4References1
OSV
OSV
added 2022/01/10 2:10 p.m.17 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.8AI score
Exploits0References5
NVD
NVD
added 2022/01/10 2:10 p.m.17 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS0.05615EPSS
Exploits4References5
Prion
Prion
added 2022/01/10 2:10 p.m.13 views

Stack overflow

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

6.8CVSS7.9AI score0.05615EPSS
Exploits4References5Affected Software2
UbuntuCve
UbuntuCve
added 2022/01/10 2:10 p.m.29 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.9AI score0.05615EPSS
Exploits4References6
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.3 views

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC that stems from a remote code execution due to a stack-based buffer overflow in image load bmp in HTMLDOC = 1.9.13...

7.8CVSS8.3AI score0.05615EPSS
Exploits4References9
OpenVAS
OpenVAS
added 2022/01/04 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2021:14869-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00101EPSS
Exploits1References2
Huntr
Huntr
added 2021/12/20 11:48 p.m.7 views

in michaelrsweet/htmldoc

Description In gifreadimage, in image.cxx, gifreadlzw might return a value greater than 255, which results in an out of bounds read, leading to denial of service. c typedef uchar gifcmapt2563; / ... / static int / I - 0 = success, -1 = failure / gifreadimageFILE fp, / I - Input file / imaget img,...

6.8AI score
Exploits0
Rows per page
Query Builder