A flaw was found in htmldoc in v1.9.12. Double-free in function pspdf_export(),in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Htmldoc | Htmldoc_project | 1.9.12 (including) | 1.9.12 (including) |
| Htmldoc | Ubuntu | bionic | * |
| Htmldoc | Ubuntu | esm-apps/bionic | * |
| Htmldoc | Ubuntu | esm-apps/focal | * |
| Htmldoc | Ubuntu | esm-apps/xenial | * |
| Htmldoc | Ubuntu | esm-infra-legacy/trusty | * |
| Htmldoc | Ubuntu | focal | * |
| Htmldoc | Ubuntu | groovy | * |
| Htmldoc | Ubuntu | hirsute | * |
| Htmldoc | Ubuntu | impish | * |
| Htmldoc | Ubuntu | kinetic | * |
| Htmldoc | Ubuntu | lunar | * |
| Htmldoc | Ubuntu | mantic | * |
| Htmldoc | Ubuntu | trusty | * |
| Htmldoc | Ubuntu | trusty/esm | * |
| Htmldoc | Ubuntu | upstream | * |
| Htmldoc | Ubuntu | xenial | * |