Tidylib for PHP Library Remote Buffer Overflow Vulnerability

Tidylib for PHP is prone to a remote buffer-overflow vulnerability because the library fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers.

An attacker can exploit this issue to execute arbitrary machine code in the context of the application using the affected library. Failed exploit attempts will likely cause a crash, denying service to legitimate users.

This issue affects Tidylib for PHP 040603; other versions may also be affected.


 

Privacy Statement
Copyright 2010, SecurityFocus