Total vulnerabilities in the database
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
| Software | From | Fixed in |
|---|---|---|
| htacg / tidy | - | 4.9.30.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 15.04 | 15.04.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| apple / mac_os_x | - | 10.6.8.x |
| apple / watchos | - | 1.0.1.x |
| apple / iphone_os | - | 8.2.x |