HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hdstrlcpy() function in string.c (when called from rendercontents in ps-pdf.cxx) via a crafted HTML document.
{ "binaries": [ { "binary_name": "htmldoc", "binary_version": "1.8.27-8ubuntu1+esm1" }, { "binary_name": "htmldoc-common", "binary_version": "1.8.27-8ubuntu1+esm1" }, { "binary_name": "htmldoc-dbgsym", "binary_version": "1.8.27-8ubuntu1+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "htmldoc", "binary_version": "1.8.27-8ubuntu1.1" }, { "binary_name": "htmldoc-common", "binary_version": "1.8.27-8ubuntu1.1" }, { "binary_name": "htmldoc-dbgsym", "binary_version": "1.8.27-8ubuntu1.1" } ], "availability": "No subscription required" }