Vulnerabilities > CVE-2022-34913 - Out-of-bounds Write vulnerability in Md2Roff Project Md2Roff 1.7

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
md2roff-project
CWE-787
critical

Summary

md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input

Vulnerable Configurations

Part Description Count
Application
Md2Roff_Project
1

Common Weakness Enumeration (CWE)