Secunia
Login
|
|
CVE Reference: CVE-2009-3627 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2009-3627 |
|
|
Description: The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/53941 SAID Secunia Advisory: SA37155 MLIST http://www.openwall.com/lists/oss-security/2009/10/23/9 CONFIRM http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c BID 36807 |
|
| Return to the previous page. |
