CVE-2015-5523

概要

参考情報

• lists.apple.com/archives/security-announce/2015/Sep/msg00001.html · Mailing List
• lists.apple.com/archives/security-announce/2015/Sep/msg00005.html · Mailing List
• lists.apple.com/archives/security-announce/2015/Sep/msg00008.html · Mailing List
• debian.org/security/2015/dsa-3309 · Third Party Advisory
• openwall.com/lists/oss-security/2015/06/04/2 · Exploit
• openwall.com/lists/oss-security/2015/07/13/7 · Exploit
• openwall.com/lists/oss-security/2015/07/15/3
• securityfocus.com/bid/75037
• securitytracker.com/id/1033703
• ubuntu.com/usn/USN-2695-1 · Third Party Advisory
• htacg/tidy-html5 · Exploit
• support.apple.com/HT205212 · Third Party Advisory
• support.apple.com/HT205213 · Third Party Advisory
• support.apple.com/HT205267 · Third Party Advisory

tidy のその他の脆弱性

• CVE-2025-6498中 5.5A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/al…
• CVE-2021-33391緊急 9.8An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
• CVE-2017-17497高 7.5In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because th…
• CVE-2017-13692高 7.5In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated b…
• CVE-2015-5522中 6.8Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service …