CVE-2017-13692
HIGHTidy 5.5.31 - Denial of Service via Invalid ISALNUM Argument
Title source: llmDescription
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.
References (2)
Core 2
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://github.com/htacg/tidy-html5/issues/588
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/100506
Scores
CVSS v3
7.5
EPSS
0.0115
EPSS Percentile
63.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (1)
htacg/tidy
5.5.31
Published
Aug 25, 2017
Tracked Since
Feb 18, 2026