CVE-2015-5522

Description

References

• lists.apple.com/archives/security-announce/2015/Sep/msg00001.html · Mailing List
• lists.apple.com/archives/security-announce/2015/Sep/msg00005.html · Mailing List
• lists.apple.com/archives/security-announce/2015/Sep/msg00008.html · Mailing List
• debian.org/security/2015/dsa-3309 · Third Party Advisory
• openwall.com/lists/oss-security/2015/06/04/2 · Exploit
• openwall.com/lists/oss-security/2015/07/13/7 · Exploit
• openwall.com/lists/oss-security/2015/07/15/3 · Exploit
• securityfocus.com/bid/75037
• securitytracker.com/id/1033703
• ubuntu.com/usn/USN-2695-1 · Third Party Advisory
• htacg/tidy-html5 · Exploit
• support.apple.com/HT205212 · Third Party Advisory
• support.apple.com/HT205213 · Third Party Advisory
• support.apple.com/HT205267 · Third Party Advisory

Weitere Schwachstellen in tidy

• CVE-2025-6498MITTEL 5.5A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/al…
• CVE-2021-33391KRITISCH 9.8An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
• CVE-2017-17497HOCH 7.5In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because th…
• CVE-2017-13692HOCH 7.5In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated b…
• CVE-2015-5523MITTEL 4.3The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving …