CVE-2017-17497

In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode…

published December 10, 2017

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01377 · 71.8th percentile
Published
2017-12-10T22:00Z
EPSS history
Timeline
  • 10 DEC 22:00Z
    In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode…
    cvelistv5