CVE-2022-0534

EPSS 0.9%CWE-125

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 feb 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).

Productos afectados

n/a · htmldoc

Referencias

https://github.com/michaelrsweet/htmldoc/commit/312f0f9c12f26fbe015cd0e6cefa40e4b99017d9 https://github.com/michaelrsweet/htmldoc/issues/463 https://lists.debian.org/debian-lts-announce/2022/02/msg00022.html