CVE-2009-3050

no score yetEPSS 4.4%

htmldoc htmldoc: no CVSS score yet. EPSS 4.4% chance of exploitation in the next 30 days.

Buffer overflow in the set_page_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitrary code via a long MEDIA SIZE comment. NOTE: it was later reported that there were additional vectors in htmllib.cxx and ps-pdf.cxx using an AFM font file with a long glyph name, but these vectors do not cross privilege boundaries.

EPSS: 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2009-09-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

htmldoc:htmldoc

References

http://bugs.gentoo.org/show_bug.cgi?id=278186
http://packetstormsecurity.org/0907-exploits/htmldoc-overflow.txt
http://secunia.com/advisories/35780
http://www.htmldoc.org/str.php?L214
http://www.openwall.com/lists/oss-security/2009/07/25/3

Check your stack JSON