CVE-2015-5522

CVE-2015-5522 is a heap-based buffer overflow in the ParseValue function of lexer.c in tidy before 4.9.31 that allows remote attackers to crash the program via a vector involving a command character in an href. The vulnerability affects tidy/libtidy and can lead to a denial of service. A fix is a...