CVE-2017-13692

In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-08-25

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Tidy (Htacg)

References

• http://www.securityfocus.com/bid/100506
• https://github.com/htacg/tidy-html5/issues/588