Lucene search
K

479 matches found

OSV
OSV
added 2022/02/09 11:15 p.m.0 views

DEBIAN-CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS5.5AI score0.00925EPSS
Exploits1References1
NVD
NVD
added 2022/02/09 11:15 p.m.22 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS0.00925EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2022/02/09 11:15 p.m.23 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS6AI score0.00925EPSS
Exploits1References4
Prion
Prion
added 2022/02/09 11:15 p.m.23 views

Design/Logic Flaw

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

4.3CVSS5.4AI score0.00925EPSS
Exploits1References3Affected Software2
OSV
OSV
added 2022/02/09 11:15 p.m.0 views

UBUNTU-CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS6AI score0.00925EPSS
Exploits1References5
CVE
CVE
added 2022/02/09 10:3 p.m.85 views

CVE-2022-0534

CVE-2022-0534 affects htmldoc 1.9.15, where a stack out-of-bounds read in gif_get_code() occurs when opening a crafted GIF, potentially causing a segmentation fault (crash). Public advisories reference this CVE alongside other HTMLDOC issues and commonly recommend upgrading to a newer htmldoc rel...

5.5CVSS5.4AI score0.00925EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/02/09 10:3 p.m.26 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

6.5AI score0.00925EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2022/02/09 10:3 p.m.38 views

CVE-2022-0534

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gifgetcode and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

5.5CVSS5.7AI score0.00925EPSS
Exploits1
CNNVD
CNNVD
added 2022/02/09 12:0 a.m.4 views

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in htmldoc, which originates from a stack out-of-bounds read/write occurring in gif get code, which can be exploited by an attacker to cause a...

5.5CVSS5.7AI score0.00925EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2022-0033)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.07349EPSS
Exploits4References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.19 views

Mageia: Security Advisory (MGASA-2022-0014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00871EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.25 views

Mageia: Security Advisory (MGASA-2021-0332)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.9AI score0.03291EPSS
Exploits8References6
OSV
OSV
added 2022/01/25 12:13 p.m.7 views

MGASA-2022-0033 Updated htmldoc packages fix security vulnerability

The updated packages fix a crash when clicking the button "Generate" and a security vulnerability: A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. CVE-2021-43579...

7.8CVSS7.9AI score0.07349EPSS
Exploits4References3
Mageia
Mageia
added 2022/01/25 12:13 p.m.37 views

Updated htmldoc packages fix security vulnerability

The updated packages fix a crash when clicking the button "Generate" and a security vulnerability: A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. CVE-2021-43579...

7.8CVSS1.8AI score0.07349EPSS
Exploits4References2
Positive Technologies
Positive Technologies
added 2022/01/21 12:0 a.m.3 views

PT-2022-18230 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.16 Description: The issue arises in the image load jpeg function within image.cxx when it calls malloc. The img-width and img-height values are large enough to cause an integer overflow. As a result, the malloc function ma...

9.8CVSS6.2AI score0.12899EPSS
Exploits9References59
OpenVAS
OpenVAS
added 2022/01/20 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2022:14877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.07349EPSS
Exploits4References2
OSV
OSV
added 2022/01/19 4:58 p.m.6 views

SUSE-SU-2022:14877-1 Security update for htmldoc

This update for htmldoc fixes the following issues: - CVE-2021-43579: Fixed stack-based buffer overflow in imageloadbmp resulting in remote code execution if the victim converts an HTML document linking to a crafted BMP file. bsc1194487...

7.8CVSS8AI score0.07349EPSS
Exploits4References3
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.2 views

The vulnerability of the hd_strlcpy() function in software for converting web pages using htmldoc, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hdstrlcpy function in software for converting web pages to htmldoc format is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.01135EPSS
Exploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.1 views

The vulnerability of the htmldoc web page transformation software, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the htmldoc web page conversion software is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.02477EPSS
Exploits1References8Affected Software5
OSV
OSV
added 2022/01/15 8:9 a.m.6 views

MGASA-2022-0014 Updated htmldoc packages fix security vulnerability

Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985...

5.5CVSS5.5AI score0.00871EPSS
Exploits1References3
Rows per page
Query Builder