CVE-2015-5522
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a comma…
Published: 2015-08-11 · CVSS: Unscored
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7