• info
• discussion
• exploit
• solution
• references

HTML-Parser Invalid HTML Entity Remote Denial of Service Vulnerability

HTML-Parser is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected application that uses the module to fall into an infinite loop, denying service to legitimate users.

Versions prior to HTML-Parser 3.63 are vulnerable.