In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-12-10T22:00:00
Updated: 2024-08-05T20:51:31.608Z
Reserved: 2017-12-10T00:00:00
Link: CVE-2017-17497
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-12-10T22:29:00.263
Modified: 2020-02-04T16:38:03.550
Link: CVE-2017-17497
Redhat