CVE-2021-23206: Buffer Overflow
A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parsetable() in ps-pdf.cxx may lead to execute arbitrary code and denial of service.
Other sources
A flaw was found in htmldoc in versions prior to 1.9.12. Stack buffer overflow in parsetable(),in ps-pdf.cxx may lead to execute arbitrary code and denial of service.
Reference: https://github.com/michaelrsweet/htmldoc/issues/416
Upstream patch: https://github.com/michaelrsweet/htmldoc/commit/ba61a3ece382389ae4482c7027af8b32e8ab4cc8
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-23206?
CVE-2021-23206 is a vulnerability in htmldoc versions 1.9.12 and prior that allows a stack buffer overflow, leading to the execution of arbitrary code and denial of service.
What is the severity of CVE-2021-23206?
CVE-2021-23206 has a severity rating of 7.8 out of 10, which is considered high.
How can CVE-2021-23206 be exploited?
CVE-2021-23206 can be exploited by sending a specially crafted input to the parse_table() function in ps-pdf.cxx, triggering a stack buffer overflow.
Which versions of htmldoc are affected by CVE-2021-23206?
Versions 1.9.12 and prior of htmldoc are affected by CVE-2021-23206.
Is there a fix available for CVE-2021-23206?
Yes, a fix is available for CVE-2021-23206. It is recommended to update htmldoc to version 1.9.13 or later to address this vulnerability.