Описание
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.
Ссылки
- ExploitIssue TrackingPatchThird Party Advisory
- ExploitIssue TrackingPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.9.15 (исключая)
cpe:2.3:a:htmldoc_project:htmldoc:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00036
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-835
Связанные уязвимости
CVSS3: 5.5
ubuntu
почти 4 года назад
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.
CVSS3: 5.5
debian
почти 4 года назад
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can l ...
CVSS3: 5.5
github
почти 4 года назад
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.
EPSS
Процентиль: 10%
0.00036
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-835