Show filters
12 Total Results
Displaying 11-12 of 12
Sort by:
Attacker Value
Unknown
CVE-2015-5523
Disclosure Date: August 11, 2015 (last updated October 05, 2023)
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
0
Attacker Value
Unknown
CVE-2015-5522
Disclosure Date: August 11, 2015 (last updated October 05, 2023)
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
0
