CVE-2009-3627

The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an…

published October 29, 2009

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01727 · 77.4th percentile
Published
2009-10-29T14:00Z
EPSS history
Timeline
  • 29 OCT 14:00Z
    The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an…
    cvelistv5