Bug ID 1186813
Summary VUL-0: CVE-2021-26259: htmldoc: heap-buffer-overflow in function in render_table_row()
Classification openSUSE
Product openSUSE Distribution
Version Leap 15.2
Hardware Other
URL https://smash.suse.de/issue/301133/
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Other
Assignee ro@suse.de
Reporter gianluca.gabrielli@suse.com
QA Contact security-team@suse.de
Found By Security Response Team
Blocker ---

A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in
render_table_row(),in ps-pdf.cxx may lead to execute arbitrary code and denial
of service.

Reference:
https://github.com/michaelrsweet/htmldoc/issues/417

Upstream patch:
https://github.com/michaelrsweet/htmldoc/commit/0ddab26a542c74770317b622e985c52430092ba5

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1967034
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-26259


You are receiving this mail because: