htmldoc <= 1.9.13 - Remote Code Execution via Crafted BMP File in image_load_bmp()
A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.