HTMLDOC e_node() Heap Buffer Overflow DoS

The vulnerability of the enode function in the htmldoc/html.cxx document, a tool for converting HTML DOC documents, is related to the escape character being output outside of the buffer in memory. Exploiting this vulnerability allows an attacker to cause service interruptions...

PT-2024-32008

Name of the Vulnerable Software and Affected Versions HTMLDOC version 1.9.18 Description The issue is related to a buffer overflow in the parse pre function, located in the ps-pdf.cxx file at line 5681. Recommendations For version 1.9.18, update to a newer version that contains a fix for this iss...

CVE-2024-45508

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists due to the buffer overflow in writeheader of html.cxx, allowing an attacker to crash the application by providing a maliciously crafted input...

CVE-2021-23180

A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in fileextension,in file.c may lead to execute arbitrary code and denial of service...

DLA-2700-1 htmldoc - security update

Bulletin has no description...

CVE-2019-19630

HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hdstrlcpy function in string.c when called from rendercontents in ps-pdf.cxx via a crafted HTML document...

CVE-2009-3050

Buffer overflow in the setpagesize function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file wit...