CVE-2022-44311

html2xhtml 中的越界读取：CVE-2022-44311 摘要 Html2xhtml v1.3 被发现存在越界读取漏洞，位于函数 static void elmclosetreenodet nodo 的 procesador.c 中。攻击者可通过构造的 HTML 文件访问敏感文件或导致拒绝服务（DoS）。 CWE-125 越界读取 是一种软件错误类型，发生在从内存中读取数据时。例如，当程序尝试读取数组末尾之后的数据时可能发生。越界读取可能导致崩溃或其他意外漏洞，并允许攻击者读取本不应访问的敏感信息。 产品 html2xhtml 测试版本 1.3 详情...

CVE-2024-35333

CVE-2024-35333 html2xhtml バージョン 1.3 の文字セット処理機能に、スタックバッファオーバーフローの脆弱性が存在します。攻撃者は特別に細工された入力を提供することでこの脆弱性を悪用し、スタック上にある 'buf' 変数のオーバーフローを引き起こす可能性があります。この脆弱性を悪用されると、攻撃者により任意のコードが実行されたり、アプリケーションがクラッシュしてサービス拒否状態に陥る可能性があります。 クラッシュ再現フェーズ クラッシュを再現するには、プロジェクトのウェブサイトにアクセスし、最新バージョン 1.3 をダウンロードします。 tar...

CVE-2022-44311

CVE-2022-44311 描述 发现 html2xhtml v1.3 在函数 static void elmclosetreenodet nodo at procesador.c 中存在越界读取。该漏洞允许攻击者通过精心构造的 html 文件访问敏感文件或导致拒绝服务 DoS。 复现步骤 要复现该漏洞，下载易受攻击版本的 html2xhtml v1.3 并编译项目： wget http://www.it.uc3m.es/jaf/html2xhtml/downloads/html2xhtml-1.3.tar.gz tar -xzvf html2xhtml-1.3.tar.gz cd...

EUVD-2022-47256

Malicious code in bioql PyPI...

EUVD-2024-35286

Malicious code in bioql PyPI...

CVE-2022-44311

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...

CVE-2024-35333

A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...

CVE-2024-35333

A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...

CVE-2024-35333

A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...

CVE-2024-35333

A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...

CVE-2024-35333: Stack-based Buffer Overflow

A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...

html2xhtml 安全漏洞

Html2xhtml is a command line tool for converting HTML files to XHTML files by the individual developer Jesus Arias Fisteus. A security vulnerability exists in html2xhtml version 1.3, which stems from improper boundary checking when copying data to a fixed-size stack buffer. An attacker can exploi...

PT-2024-26438 · Unknown · Html2Xhtml

Name of the Vulnerable Software and Affected Versions: html2xhtml version 1.3 Description: A stack-buffer-overflow issue exists in the read charset decl function due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this by providing a specially...

Exploit for CVE-2024-35333

CVE-2024-35333 A stack buffer overflow vulnerability exists i...

CVE-2022-44311

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...

Out-of-bounds

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...

CVE-2022-44311

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...

CVE-2022-44311

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...

PT-2022-27175 · Unknown · Html2Xhtml

Name of the Vulnerable Software and Affected Versions: html2xhtml version 1.3 Description: The issue is related to an Out-Of-Bounds read in the elm close function at procesador.c. This allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...

CVE-2022-44311: Out-of-bounds Read

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...