CVE-2022-0137

Опубликовано: 14 нояб. 2022

Источник: nvd

CVSS3: 7.5

CVSS3: 5.5

EPSS Низкий

Описание

A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.

Ссылки

https://github.com/michaelrsweet/htmldoc/commit/71fe87878c9cbc3db429f5e5c70f28e4b3d96e3b
Patch
Third Party Advisory
https://github.com/michaelrsweet/htmldoc/issues/461
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/michaelrsweet/htmldoc/commit/71fe87878c9cbc3db429f5e5c70f28e4b3d96e3b
Patch
Third Party Advisory
https://github.com/michaelrsweet/htmldoc/issues/461
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:htmldoc_project:htmldoc:*:*:*:*:*:*:*:*

Версия до 1.9.15 (исключая)

EPSS

Процентиль: 24%

0.00082

Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-119

CWE-787

Связанные уязвимости

CVE-2022-0137

CVSS3: 7.5

ubuntu

около 3 лет назад

A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.

CVE-2022-0137

CVSS3: 7.5

debian

около 3 лет назад

A heap buffer overflow in image_set_mask function of HTMLDOC before 1. ...

GHSA-f2rv-ggmm-f4p9

CVSS3: 5.5

github

около 3 лет назад

A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.

EPSS

Процентиль: 24%

0.00082

Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-119

CWE-787