CVE-2024-43700

Published
View on NVD ↗
CVSS v3
7.8
HIGH
CVSS v2
N/A
Affected
1
PROJECT

Description

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment.

xfpt converts text with a simple markup into XML, typically DocBook.
GitHubGitHub
1