Name: Vulnix
Price: 99 USD

Description

The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlMailing List, Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlMailing List, Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2015/dsa-3309Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/06/04/2Exploit
http://www.openwall.com/lists/oss-security/2015/07/13/7Exploit
http://www.openwall.com/lists/oss-security/2015/07/15/3
http://www.securityfocus.com/bid/75037
http://www.securitytracker.com/id/1033703
http://www.ubuntu.com/usn/USN-2695-1Third Party Advisory
https://github.com/htacg/tidy-html5/issues/217#issuecomment-108565501Exploit
https://support.apple.com/HT205212Third Party Advisory
https://support.apple.com/HT205213Third Party Advisory
https://support.apple.com/HT205267Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlMailing List, Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlMailing List, Third Party Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlMailing List, Third Party Advisory
http://www.debian.org/security/2015/dsa-3309Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/06/04/2Exploit
http://www.openwall.com/lists/oss-security/2015/07/13/7Exploit
http://www.openwall.com/lists/oss-security/2015/07/15/3
http://www.securityfocus.com/bid/75037
http://www.securitytracker.com/id/1033703
http://www.ubuntu.com/usn/USN-2695-1Third Party Advisory
https://github.com/htacg/tidy-html5/issues/217#issuecomment-108565501Exploit
https://support.apple.com/HT205212Third Party Advisory
https://support.apple.com/HT205213Third Party Advisory
https://support.apple.com/HT205267Third Party Advisory

Timeline

Published: Aug 11, 2015
Last modified: Jun 17, 2026
NVD status: Modified

CVE-2015-5523