CVE-2019-19630 - HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when ca

CVE-2019-19630

Summary

HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.

References

Vulnerable Configurations

cpe:2.3:a:htmldoc_project:htmldoc:1.9.7:*:*:*:*:*:*:*
cpe:2.3:a:htmldoc_project:htmldoc:1.9.7:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 01-02-2023 - 19:35)
Impact:
Exploitability:

CWE

CWE-787

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

fedora	FEDORA-2019-e039dfaa30 FEDORA-2019-e90a7032f2
misc	https://github.com/michaelrsweet/htmldoc/issues/370
mlist	[debian-lts-announce] 20191209 [SECURITY] [DLA 2026-1] htmldoc security update

Last major update

01-02-2023 - 19:35

Published

08-12-2019 - 02:15

Last modified

01-02-2023 - 19:35