PT-2007-4572 · Html Tidy+1 · Libtidy+1
Rgod
·
Publicado
2007-06-20
·
Atualizado
2017-10-11
·
CVE-2007-3294
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Tidy extension for PHP version 5.2.3
Description
The issue is related to multiple buffer overflows in libtidy, which can be exploited by context-dependent attackers to execute arbitrary code. This can be achieved through a long second argument to the
tidy parse string function or an unspecified vector to the tidy repair string function. The problem might be specific to environments where vsnprintf is implemented as a wrapper for vsprintf.Recommendations
For Tidy extension for PHP version 5.2.3, consider restricting the input to the
tidy parse string and tidy repair string functions to prevent buffer overflows until a patch is available. As a temporary workaround, avoid using the tidy parse string and tidy repair string functions with untrusted input.Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tidy Extension For Php
Libtidy