CVE-2024-35333

A stack-buffer-overflow vulnerability exists in the html2xhtml 1.3 command-line tool within the read_charset_decl function. The root cause is improper bounds checking during a loop that copies data from a buffer into a fixed-size stack buffer (buf), failing to ensure that the index does not excee...

html2xhtml 安全漏洞

Html2xhtml is a command line tool for converting HTML files to XHTML files by the individual developer Jesus Arias Fisteus. A security vulnerability exists in html2xhtml version 1.3, which stems from improper boundary checking when copying data to a fixed-size stack buffer. An attacker can exploi...

CVE-2024-35333: Stack-based Buffer Overflow

A stack-buffer-overflow vulnerability exists in the readcharsetdecl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the...