PT-2022-27175 · Unknown · Html2Xhtml

Halcy0Nic · Published 2022-11-08 · Updated 2025-05-01 · CVE-2022-44311

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions html2xhtml version 1.3

Description The issue is related to an Out-Of-Bounds read in the elm close() function at procesador.c. This allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.

Recommendations For html2xhtml version 1.3, consider disabling the elm close() function as a temporary workaround until a patch is available. Restrict access to sensitive files to minimize the risk of exploitation. Avoid using crafted html files that could trigger the Out-Of-Bounds read in the elm close() function until the issue is resolved.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-44311

Affected Products

Html2Xhtml

References · 7

• 🔥 https://github.com/jfisteus/html2xhtml/issues/19 · Exploit
• 🔥 https://github.com/DesmondSanctity/Out-Of-Bounds-read-in-html2xhtml-v1.3-CVE-2022-44311 · Exploit
• https://osv.dev/vulnerability/CVE-2022-44311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44311 · Security Note
• https://t.me/cybersecuritytechnologies/7794 · Telegram Post
• https://t.me/cvenotify/120554 · Telegram Post
• https://t.me/cibsecurity/52649 · Telegram Post