CVE-2015-5147

Description

Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

References

https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md

http://www.securityfocus.com/bid/75508

http://www.openwall.com/lists/oss-security/2015/06/30/10

http://www.openwall.com/lists/oss-security/2015/06/29/3

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS