tidy -- heap-buffer-overflow

Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be abused on server side applications that use php-tidy extension with user input. The issue was confirmed, analyzed, and fixed by the tidy5 maintainer...

Medium: php54

Issue Overview: acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. A denial of service flaw was found in the way the File Information fileinfo extension parsed certain...

Fedora 19 : perltidy-20130922-1.fc19 (2014-3891)

Update to 20130922, apply fix for CVE-2014-2277. http://cpansearch.perl.org/src/SHANCOCK/Perl-Tidy-20130922/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora 20 : perltidy-20130922-1.fc20 (2014-3874)

Update to 20130922, apply fix for CVE-2014-2277. http://cpansearch.perl.org/src/SHANCOCK/Perl-Tidy-20130922/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Critical: php

Issue Overview: The asn1timetotimet function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse 1 notBefore and 2 notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of...

php: tidy_diagnose() NULL pointer dereference may cause DoS

The tidydiagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153...

PHP "tidy_diagnose()"空指针引用拒绝服务漏洞

BUGTRAQ ID: 51992 CVE ID: CVE-2012-0781 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP 5.3.8中的tidydiagnose函数在处理特制输入时，可允许远程攻击者对无效对象执行Tidy::diagnose操作，造成拒绝服务。 0 PHP 5.3.8 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...

Null pointer dereference

The tidydiagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153...

CVE-2012-0781

The tidydiagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153...

Debian Security Advisory DSA 1647-1 (php5)

The remote host is missing an update to php5 announced via advisory DSA 1647-1. OpenVAS Vulnerability Test $Id: deb16471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1647-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

PHP 5.2.3 tidy extension local overflow vulnerability-vulnerability warning-the black bar safety net

? php if ! extensionloaded"tidy"die"you need Tidy extension loaded!"; $scode = "\xfc\xbb\xc7\xc4\x05\xc9\xeb\x0c\x5e\x56\x31\x1e\xad\x01\xc3\x85". "\xc0\x75\xf7\xc3\xe8\xef\xff\xff\xff\x3b\x2c\x41\xc9\xc3\xad\xc1". "\x8c\xff\x26\xa9\x0b\x87\x39\xbd\x9f\x38\x22\xca\xff\xe6\x53\x27"...

PHP Tidy库远程缓冲区溢出漏洞

BUGTRAQ ID: 24527 Tidy库用于改正HTML文档中的常见错误并生成格式编排良好的等价文档，还可以生成XHTML格式的文档。 Tidy库实现上存在缓冲区溢出漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文档执行恶意指令。 PHP所使用的Tidy库中没有正确验证对tidyparsestring和tidyrepairstring函数的输入。如果用户向这些函数传送了超长参数的话，就可能触发缓冲区溢出，导致执行任意指令。 C. Reitzel TidyLib for PHP 050506 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本...

PHP 5.2.3 Tidy extension Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== PHP 5.2.3 Tidy extension Local Buffer Overflow Exploit ====================================================== ?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow...

PHP 5.2.3 Tidy extension Local Buffer Overflow Exploit

No description provided by source. ?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache...

PHP 5.2.3 Tidy Extension - Local Buffer Overflow

PHP 5.2.3 Tidy Extension - Local Buffer Overflow ?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache //let's have a look here:...

PHP 5.2.3 'Tidy' Extension - Local Buffer Overflow

?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache //let's have a look here: http://www.google.com/codesearch?hl=it&q=+tidyparsestring&sa=N if...

CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

DEBIAN-CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1245

Cross-site scripting XSS vulnerability in MediaWiki before 1.4.2, when using HTML Tidy $wgUseTidy, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1245

CVE-2005-1245 is an XSS vulnerability in MediaWiki prior to 1.4.2 when HTML Tidy is enabled via $wgUseTidy. The flaw allows remote attackers to inject arbitrary web script or HTML through unknown vectors. Affected product: MediaWiki (before 1.4.2). The root cause and precise exploit vectors are n...