CVE-2019-19630: Buffer Overflow
Published Dec 8, 2019
·Updated
HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hdstrlcpy() function in string.c (when called from rendercontents in ps-pdf.cxx) via a crafted HTML document.
Affected Software
5 affected components
Htmldoc Project Htmldoc=1.9.7
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Event History
Dec 8, 2019
CVE Published
via MITRE·01:57 AM
Data Sourced
via MITRE·01:57 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2019-19630.
2
What is the severity of CVE-2019-19630?
The severity of CVE-2019-19630 is high (7.8).
3
How does CVE-2019-19630 affect HTMLDOC?
CVE-2019-19630 affects HTMLDOC version 1.9.7.
4
Which software versions are affected by CVE-2019-19630?
HTMLDOC version 1.9.7 is affected by CVE-2019-19630, as well as Debian Linux versions 8.0 and 9.0, and Fedora versions 30 and 31.
5
How can I fix CVE-2019-19630?
To fix CVE-2019-19630, it is recommended to update to a patched version of HTMLDOC or apply the necessary security updates for the affected software.