Vulnerabilities > Htacg > High

DATE CVE VULNERABILITY TITLE RISK
2017-12-10 CVE-2017-17497 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Htacg Tidy 5.7.0
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.
network
low complexity
htacg CWE-119
7.5
2017-08-25 CVE-2017-13692 Improper Input Validation vulnerability in Htacg Tidy 5.5.31
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.
network
low complexity
htacg CWE-20
7.5