Vulnerabilities

TI-2006-05461 CVE-2006-5657 · GHSA-4g4q-q7g9-8775

Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.

MEDIUM 46

Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01621 Published 2006-11-03 No fix listed

TI-2006-05460 CVE-2006-5656 · GHSA-cmqw-4698-8jmq

Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows…

LOW 26

Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the tmp_align variable.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01549 Published 2006-11-03 No fix listed CWE-399

TI-2004-01177 CVE-2004-1299 · GHSA-9453-pwf2-7h72

Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote…

MEDIUM 57

Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web page.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12253 Published 2004-12-22 No fix listed

Vulnerabilities

Filters

Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.

Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows…

Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote…