Lucene search
K

479 matches found

Mageia
Mageia
added 2022/01/15 8:9 a.m.29 views

Updated htmldoc packages fix security vulnerability

Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985...

5.5CVSS4AI score0.00871EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.9 views

PT-2022-13245 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.15 Description: A vulnerability was found in htmldoc where the stack out-of-bounds read takes place in the gif get code function and occurs when opening a malicious GIF file, which can result in a crash segmentation fault...

9.8CVSS6.6AI score0.07349EPSS
Exploits19References87
NVD
NVD
added 2022/01/10 2:10 p.m.18 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS0.07349EPSS
Exploits4References5
OSV
OSV
added 2022/01/10 2:10 p.m.0 views

DEBIAN-CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS8.5AI score0.07349EPSS
Exploits4References1
OSV
OSV
added 2022/01/10 2:10 p.m.18 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.8AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/01/10 2:10 p.m.29 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.9AI score0.07349EPSS
Exploits4References6
Prion
Prion
added 2022/01/10 2:10 p.m.17 views

Stack overflow

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

6.8CVSS7.9AI score0.07349EPSS
Exploits4References5Affected Software2
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.3 views

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC that stems from a remote code execution due to a stack-based buffer overflow in image load bmp in HTMLDOC = 1.9.13...

7.8CVSS8.3AI score0.07349EPSS
Exploits4References9
OpenVAS
OpenVAS
added 2022/01/04 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2021:14869-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00871EPSS
Exploits1References2
Huntr
Huntr
added 2021/12/20 11:48 p.m.7 views

in michaelrsweet/htmldoc

Description In gifreadimage, in image.cxx, gifreadlzw might return a value greater than 255, which results in an out of bounds read, leading to denial of service. c typedef uchar gifcmapt2563; / ... / static int / I - 0 = success, -1 = failure / gifreadimageFILE fp, / I - Input file / imaget img,...

6.8AI score
Exploits0
OpenVAS
OpenVAS
added 2021/12/18 12:0 a.m.18 views

Ubuntu: Security Advisory (USN-5198-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.9AI score0.01268EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2021/12/16 7:32 p.m.77 views

USN-5198-1: HTMLDOC vulnerability

It was discovered that HTMLDOC improperly handled malformed URIs from an input html file. An attacker could use this to cause a denial of service...

7.8CVSS7.2AI score0.01268EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2021/12/16 12:0 a.m.29 views

Ubuntu 20.04 LTS : HTMLDOC vulnerability (USN-5198-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5198-1 advisory. It was discovered that HTMLDOC improperly handled malformed URIs from an input html file. An attacker could use this to cause a denial of service. Tenable has...

7.8CVSS7.3AI score0.01268EPSS
Exploits1References2
Veracode
Veracode
added 2021/11/21 4:47 a.m.27 views

Remote Code Execution (RCE)

htmldoc is vulnerable to remote code execution. The vulnerability exists due to a stack-based buffer overflow in imageloadbmp in HTMLDOC...

7.8CVSS2.7AI score0.07349EPSS
Exploits4References6Affected Software1
CVE
CVE
added 2021/11/12 5:49 p.m.86 views

CVE-2021-43579

HTMLDOC contains a stack-based buffer overflow in image_load_bmp() that can cause remote code execution when a crafted BMP file is linked from an HTML document, affecting HTMLDOC

7.8CVSS7.8AI score0.07349EPSS
Exploits4References5Affected Software1
Cvelist
Cvelist
added 2021/11/12 5:49 p.m.23 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

8.2AI score0.07349EPSS
Exploits4References5
Debian CVE
Debian CVE
added 2021/11/12 5:49 p.m.30 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.8AI score0.07349EPSS
Exploits4
Positive Technologies
Positive Technologies
added 2021/11/12 12:0 a.m.2 views

PT-2021-23884 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: HTMLDOC versions prior to 1.9.14 Description: A stack-based buffer overflow in the image load bmp function results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. Recommendations: For versions...

10CVSS7.5AI score0.07349EPSS
Exploits22References111
Veracode
Veracode
added 2021/11/11 4:8 a.m.31 views

Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists due to a buffer overflow...

5.5CVSS2AI score0.00871EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2021/11/04 12:0 a.m.24 views

Michael R Sweet HTMLDOC Buffer Overflow Vulnerability

HTMLDOC is an HTML file format conversion editor that reads HTML and Markdown source files or web pages and generates the corresponding EPUB, HTML, PostScript or PDF files with optional table of contents. A buffer overflow vulnerability exists in imageloadbmp in HTMLDOC versions prior to 1.9.12. ...

5.5CVSS6.2AI score0.00871EPSS
Exploits1References1
Rows per page
Query Builder