Buffer overflow in Jan Engelhardt Libhx

CVE-2010-2947

Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.

Vulnerability class: Buffer Overflow

EPSS: 0.055 (92.0th percentile) — read the EPSS interpretation.