http://www.securitytracker.com/id/1033703 [No Types Assigned]

http://www.securityfocus.com/bid/75037 [No Types Assigned]

Configuration 1
     OR
          *cpe:2.3:a:htacg:tidy:4.9.30:*:*:*:*:*:*:* (and previous)

Configuration 1
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:o:apple:mac_os_x:10.6.8:*:*:*:*:*:*:* (and previous)
          *cpe:2.3:o:apple:watchos:1.0.1:*

http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html No Types Assigned

http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html Third Party Advisory, Mailing List

http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html No Types Assigned

http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html Third Party Advisory, Mailing List

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html No Types Assigned

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html Third Party Advisory, Mailing List

http://www.debian.org/security/2015/dsa-3309 No Types Assigned

http://www.debian.org/security/2015/dsa-3309 Third Party Advisory

http://www.ubuntu.com/usn/USN-2695-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2695-1 Third Party Advisory

https://support.apple.com/HT205212 No Types Assigned

https://support.apple.com/HT205212 Third Party Advisory

https://support.apple.com/HT205213 No Types Assigned

https://support.apple.com/HT205213 Third Party Advisory

https://support.apple.com/HT205267 No Types Assigned

https://support.apple.com/HT205267 Third Party Advisory

http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

https://support.apple.com/HT205213

https://support.apple.com/HT205267

http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html

https://support.apple.com/HT205212

Vulnerabilidad en la función ParseValue en lexer.c en tidy en versiones anteriores a 4.9.31, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores implicando múltiples espacios en blanco antes de un href vacío, lo que desencadena una asignación de memoria de gran tamaño.

Vulnerabilidad en la función ParseValue en lexer.c en limpio anterior a 4.9.31 permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores que involucran múltiples espacios en blanco antes de un href vacío, lo que desencadena una asignación de memoria de gran tamaño.

Configuration 1
     OR
          *cpe:2.3:a:htacg:tidy:4.9.30:*:*:*:*:*:*:* (and previous)

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

CWE-119

http://www.openwall.com/lists/oss-security/2015/06/04/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2015/06/04/2 Exploit

http://www.openwall.com/lists/oss-security/2015/07/13/7 No Types Assigned

http://www.openwall.com/lists/oss-security/2015/07/13/7 Exploit

https://github.com/htacg/tidy-html5/issues/217#issuecomment-108565501 No Types Assigned

https://github.com/htacg/tidy-html5/issues/217#issuecomment-108565501 Exploit