PT-2005-1021 · Ht · Ht Package+1

Published 2005-05-14 · Updated 2008-09-10 · CVE-2005-1546

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HT Editor versions prior to 0.8.0 ht package (affected versions not specified)

Description The issue is related to a buffer overflow in the PE parser, which can be exploited by remote attackers to execute arbitrary code via a crafted PE file. Additionally, multiple vulnerabilities in the ht package may lead to disruption of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

Recommendations For HT Editor versions prior to 0.8.0, update to version 0.8.0 or later to resolve the issue. For the ht package, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-02607

CVE-2005-1546

DSA-743-1

Affected Products

Ht Editor

Ht Package

References · 10

• http://debian.org/security/2005/dsa-743 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1546 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1546 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02607 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-1546 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1545 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1546 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200505-08.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-1546 · Vendor Advisory
• http://debian.org/security/dsa-743 · Note