CVE-2022-0534

EPSS 0.9%CWE-125

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 fev 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).

Produtos afetados

n/a · htmldoc

Referências

https://github.com/michaelrsweet/htmldoc/commit/312f0f9c12f26fbe015cd0e6cefa40e4b99017d9 https://github.com/michaelrsweet/htmldoc/issues/463 https://lists.debian.org/debian-lts-announce/2022/02/msg00022.html