Summary
It was discovered that HTMLDOC did not properly manage memory under certain
circumstances. If a user were tricked into opening a specially crafted HTML
file, a remote attacker could possibly use this issue to cause HTMLDOC to
crash, resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | htmldoc | 1.9.2-1ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | htmldoc | 1.9.7-1ubuntu0.3 |
Vulnerabilities 1
-
Unscored —
A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to…
References
-
report
https://ubuntu.com/security/CVE-2021-23165