7.8
CVE-2021-26948
- EPSS 0.15%
- Veröffentlicht 03.03.2022 23:15:08
- Zuletzt bearbeitet 21.11.2024 05:57:06
- Quelle secalert@redhat.com
- Teams Watchlist Login
- Unerledigt Login
Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Htmldoc Project ≫ Htmldoc Version1.9.11
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.364 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
CWE-479 Signal Handler Use of a Non-reentrant Function
The product defines a signal handler that calls a non-reentrant function.