Buffer overflow

Buffer overflow in the setpagesize function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file wit...

CVE-2009-3050

CVE-2009-3050 is a buffer overflow in HTMLDOC. The primary vector is set_page_size in util.cxx for HTMLDOC 1.8.27 and earlier via a long MEDIA SIZE comment, allowing context-dependent arbitrary code execution. Additional vectors in htmllib.cxx and ps-pdf.cxx using a long AFM font glyph name exist...