CVE-2021-43579: Buffer Overflow
First published: Fri Nov 12 2021(Updated: )
A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Htmldoc Project Htmldoc | <=1.9.13 | |
| Debian Debian Linux | =9.0 | |
| <=1.9.13 | ||
| =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/michaelrsweet/htmldoc/commit/27d08989a5a567155d506ac870ae7d8cc88fa58b
- https://github.com/michaelrsweet/htmldoc/compare/v1.9.12...v1.9.13
- https://github.com/michaelrsweet/htmldoc/issues/453
- https://github.com/michaelrsweet/htmldoc/issues/456
- https://lists.debian.org/debian-lts-announce/2022/02/msg00022.html
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-43579.
What is the severity of CVE-2021-43579?
The severity of CVE-2021-43579 is high (7.8).
How does CVE-2021-43579 occur?
CVE-2021-43579 occurs due to a stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13.
What is the potential impact of CVE-2021-43579?
The potential impact of CVE-2021-43579 is remote code execution if the victim converts an HTML document linking to a crafted BMP file.
How can I fix CVE-2021-43579?
To fix CVE-2021-43579, upgrade to a version of HTMLDOC greater than 1.9.13.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/references
- agent/remedy
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/htmldoc project
- canonical/htmldoc project htmldoc
- version/htmldoc project htmldoc/1.9.13
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0