exploitDog

CVE-2022-44311

Опубликовано: 08 нояб. 2022

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.

Ссылки

https://github.com/jfisteus/html2xhtml/issues/19
Exploit
Issue Tracking
Third Party Advisory
https://github.com/jfisteus/html2xhtml/issues/19
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:html2xhtml_project:html2xhtml:1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01811

Низкий

8.1 High

CVSS3

Дефекты

CWE-125

CWE-125

Связанные уязвимости

GHSA-28fm-qh2h-3mch

CVSS3: 8.1

github

почти 3 года назад

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.

EPSS

Процентиль: 82%

0.01811

Низкий

8.1 High

CVSS3

Дефекты

CWE-125

CWE-125