Lucene search
+L

488 matches found

Positive Technologies
Positive Technologies
added 2022/01/21 12:0 a.m.5 views

PT-2022-18230 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.16 Description: The issue arises in the image load jpeg function within image.cxx when it calls malloc. The img-width and img-height values are large enough to cause an integer overflow. As a result, the malloc function ma...

9.8CVSS6.2AI score0.08067EPSS
SaveExploits9References59
OpenVAS
OpenVAS
added 2022/01/20 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2022:14877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.07349EPSS
SaveExploits4References2
OSV
OSV
added 2022/01/19 4:58 p.m.7 views

SUSE-SU-2022:14877-1 Security update for htmldoc

This update for htmldoc fixes the following issues: - CVE-2021-43579: Fixed stack-based buffer overflow in imageloadbmp resulting in remote code execution if the victim converts an HTML document linking to a crafted BMP file. bsc1194487...

7.8CVSS8AI score0.07349EPSS
SaveExploits4References3
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.8 views

The vulnerability of the htmldoc web page transformation software, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the htmldoc web page conversion software is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.02477EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.9 views

The vulnerability of the hd_strlcpy() function in software for converting web pages using htmldoc, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hdstrlcpy function in software for converting web pages to htmldoc format is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.01135EPSS
SaveExploits1References7Affected Software5
OSV
OSV
added 2022/01/15 8:9 a.m.12 views

MGASA-2022-0014 Updated htmldoc packages fix security vulnerability

Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985...

5.5CVSS5.5AI score0.00871EPSS
SaveExploits1References3
Mageia
Mageia
added 2022/01/15 8:9 a.m.34 views

Updated htmldoc packages fix security vulnerability

Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985...

5.5CVSS4AI score0.00871EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.12 views

PT-2022-13245 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.15 Description: A vulnerability was found in htmldoc where the stack out-of-bounds read takes place in the gif get code function and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

9.8CVSS6.6AI score0.07349EPSS
SaveExploits19References87
NVD
NVD
added 2022/01/10 2:10 p.m.21 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS0.07349EPSS
SaveExploits4References5
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:10 p.m.8 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS8AI score0.07349EPSS
SaveExploits4References6
OSV
OSV
added 2022/01/10 2:10 p.m.0 views

DEBIAN-CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS8.5AI score0.07349EPSS
SaveExploits4References1
OSV
OSV
added 2022/01/10 2:10 p.m.22 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.8AI score
SaveExploits0References5
Prion
Prion
added 2022/01/10 2:10 p.m.18 views

Stack overflow

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

6.8CVSS7.9AI score0.07349EPSS
SaveExploits4References5Affected Software2
UbuntuCve
UbuntuCve
added 2022/01/10 2:10 p.m.33 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.9AI score0.07349EPSS
SaveExploits4References6
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.9 views

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC that stems from a remote code execution due to a stack-based buffer overflow in image load bmp in HTMLDOC = 1.9.13...

7.8CVSS8.3AI score0.07349EPSS
SaveExploits4References9
OpenVAS
OpenVAS
added 2022/01/04 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2021:14869-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00871EPSS
SaveExploits1References2
Huntr
Huntr
added 2021/12/20 11:48 p.m.8 views

in michaelrsweet/htmldoc

Description In gifreadimage, in image.cxx, gifreadlzw might return a value greater than 255, which results in an out of bounds read, leading to denial of service. c typedef uchar gifcmapt2563; / ... / static int / I - 0 = success, -1 = failure / gifreadimageFILE fp, / I - Input file / imaget img,...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/12/18 12:0 a.m.19 views

Ubuntu: Security Advisory (USN-5198-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.9AI score0.01354EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2021/12/16 7:32 p.m.80 views

USN-5198-1: HTMLDOC vulnerability

It was discovered that HTMLDOC improperly handled malformed URIs from an input html file. An attacker could use this to cause a denial of service...

7.8CVSS7.2AI score0.01354EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/12/16 12:0 a.m.32 views

Ubuntu 20.04 LTS : HTMLDOC vulnerability (USN-5198-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5198-1 advisory. It was discovered that HTMLDOC improperly handled malformed URIs from an input html file. An attacker could use this to cause a denial of service. Tenable has...

7.8CVSS7.3AI score0.01354EPSS
SaveExploits1References2
Rows per page
Query Builder