PT-2009-5382 · Htmldoc · Htmldoc

Jan Lieskovsky · Published 2009-09-02 · Updated 2024-06-15 · CVE-2009-3050

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: HTMLDOC versions 1.8.27 and earlier

Description: The issue allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. It was also reported that there are additional vectors using an AFM font file with a long glyph name in certain files, although these do not cross privilege boundaries.

Recommendations: For HTMLDOC versions 1.8.27 and earlier, consider updating to a newer version to mitigate the risk, although the specific fixed version is not provided. As a temporary workaround, consider restricting the use of the set page size function in util.cxx until a patch is available. Additionally, avoid using AFM font files with long glyph names in htmllib.cxx and ps-pdf.cxx to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3050

OPENSUSE-SU-2024:10463-1

Affected Products

Htmldoc

References · 13

• 🔥 http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt · Exploit
• 🔥 http://htmldoc.org/str.php?L214 · Exploit
• 🔥 http://bugs.gentoo.org/show_bug.cgi?id=278186 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10463-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3050 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2009-3050 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-3050 · Vendor Advisory
• http://secunia.com/advisories/35780 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-3050 · Vendor Advisory
• http://openwall.com/lists/oss-security/2009/07/25/3 · Note
• http://openwall.com/lists/oss-security/2009/09/01/1 · Note
• https://suse.com/security/cve/CVE-2009-3050 · Note
• http://openwall.com/lists/oss-security/2009/07/26/2 · Note