66 matches found
HTMLDOC Integer Overflow Vulnerability
HTMLDOC is an HTML file format conversion editor that reads HTML and Markdown source files or web pages and generates the corresponding EPUB, HTML, PostScript or PDF files with optional table of contents. An integer overflow vulnerability exists in HTMLDOC 1.9.11 and earlier versions. An attacker...
Integer overflow
Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181...
Ubuntu 16.04 LTS / 18.04 LTS : HTMLDOC vulnerability (USN-4696-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4696-1 advisory. It was discovered that HTMLDOC incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a denial of service. Tenable...
[ MDVSA-2009:231 ] htmldoc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:231 http://www.mandriva.com/security/ Package : htmldoc Date : September 11, 2009 Affected: 2009.0, 2009.1, Corporate 4.0 Problem Description: A security vulnerability has been identified and fixed in htmldo...
DEBIAN-CVE-2009-3050
Buffer overflow in the setpagesize function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file wit...
HTMLDOC html文件处理栈溢出漏洞
BUGTRAQ ID: 35727 HTMLDOC是用于将HTML文件和网页转换为适合在线查看和打印的索引HTML、PostScript和PDF文件的工具。 HTMLDOC的htmldoc/util.cxx文件中的sscanf和setpagesize函数存在栈溢出漏洞。如果用户受骗打开了包含有特制MEDIA SIZE标注的HTML文档的话,就可以触发这个溢出,导致执行任意指令。 Easy Software Products HTMLDOC 1.8.27 厂商补丁: Easy Software Products ----------------------...