NULL pointer dereference in parsing invalid HTML

[Luke Schierer]

On Thu, Oct 04, 2007 at 10:22:36AM -0400, Josh Bressers wrote:
> > 
> > I think we need a CVE # for this, and we might want to release 2.2.2 -
> > what do others think?
> > 
> 
> Use CVE-2007-4999 for this flaw.
> 
> Thanks.
> 
> -- 
>     JB

Now that we have released 2.2.2 with this fix (finally), can someone
please update the security page?

thanks,
luke