A vulnerability has been identified in HTML-Parser, which could be exploited by attackers to cause a denial of service. This issue is caused by an infinite loop in the "decode_entities()" [util.c] function when processing malformed HTML entities, which could allow attackers to crash an affected application via specially crafted HTML data.

Affected Products

HTML-Parser versions prior to 3.63

Solution

Upgrade to HTML-Parser version 3.63 :
http://search.cpan.org/CPAN/authors/id/G/GA/GAAS/HTML-Parser-3.63.tar.gz

References

http://www.vupen.com/english/advisories/2009/3022
http://github.com/gisle/html-parser/commit/b9aae1e43eb2c8e989510187cff0ba3e996f9a4c
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225

Credits

Vulnerability reported by Mark Martinec.

Changelog

2009-10-26 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.