Title: Vilistextum HTML Attribute Parsing Buffer Overflow Vulnerability
Severity: HIGH
Description:
Vilistextum is an HTML to text/ASCII conversion application for UNIX/Linux variants.
Vilistextum is prone to a buffer overflow vulnerability. This issue is exposed when the application parses HTML attributes while converting an HTML file to text/ASCII. Since HTML files will likely originate from an external or untrusted source, this issue should be considered remote in nature.
The specific issue exists in the function get_attr() in 'html.c'. The cause of the vulnerability is that HTML attribute data will be read into a 32768 byte destination buffer without placing sufficient limits on the amount of source data read. If more data is read into the destination buffer than it can hold, memory corruption will occur.
Successful exploitation will allow for execution of arbitrary code in the context of the user running the application.
Affected Products:
- Bolthole Filter 2.6.1
- Gentoo Linux
- Vilistextum Vilistextum 2.6.6
References:
- "D. J. Bernstein" <djb@cr.yp.to>: [remote] [control] vilistextum 2.6.6 get_attr overflows temp buffer
- Vilistextum: Vilistextum Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
