CVE-2009-3050

KRITISCH 10.0CVE-2009-3050 · Published 02/09/2009 · updated 16/06/2026

Kurz gesagt

CVE-2009-3050 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in htmldoc (htmldoc).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.4%, höher als bei 91.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
htmldoc htmldoc	`= 1.8.24= 1.8.25= 1.8.26≤ 1.8.27`	No fix yet

Description

Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries.

References

bugs.gentoo.org/show_bug.cgi · Exploit
packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt · Exploit
secunia.com/advisories/35780 · Vendor Advisory
htmldoc.org/str.php · Exploit
openwall.com/lists/oss-security/2009/07/25/3
openwall.com/lists/oss-security/2009/07/26/2
openwall.com/lists/oss-security/2009/09/01/1

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free