ISOMAN

CVE

CVE-2015-5522

Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.

Severity
MEDIUM
CVSS
6.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
  2. http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html
  3. http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
  4. http://www.debian.org/security/2015/dsa-3309
  5. http://www.openwall.com/lists/oss-security/2015/06/04/2
  6. http://www.openwall.com/lists/oss-security/2015/07/13/7
  7. http://www.openwall.com/lists/oss-security/2015/07/15/3
  8. http://www.securityfocus.com/bid/75037
  9. http://www.securitytracker.com/id/1033703
  10. http://www.ubuntu.com/usn/USN-2695-1
  11. https://github.com/htacg/tidy-html5/issues/217
  12. https://support.apple.com/HT205212
  13. https://support.apple.com/HT205213
  14. https://support.apple.com/HT205267
  15. http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html
  16. http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html
  17. http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
  18. http://www.debian.org/security/2015/dsa-3309
  19. http://www.openwall.com/lists/oss-security/2015/06/04/2
  20. http://www.openwall.com/lists/oss-security/2015/07/13/7