Vendors / Vilistextum Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Vilistextum records in CISA KEV No Vilistextum vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 57
Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web page.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12253 · Published 2004-12-22 · No fix listed
Priority MEDIUM 46
Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01621 · Published 2006-11-03 · No fix listed
Priority LOW 26
Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the tmp_align variable.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01549 · Published 2006-11-03 · No fix listed CWE-399
Open these records in search → All records by CVSS severity
Critical2 High0 Medium1 Low0 No CVSS0