Fedora 10 : expat-2.0.1-5.fc10.1 (2009-11029)

This update fixes a security vulnerability: A buffer over-read flaw was found in the way Expat handles malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause applications using Expat to crash while parsing the file. CVE-2009-3720 Note that Tenable Network...

Fedora 11 : python-4Suite-XML-1.0.2-8.fc11 (2009-10972)

Fixes a denial of service when handling malformed XML CVE-2009-3720 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 10 : python-4Suite-XML-1.0.2-8.fc10 (2009-10956)

Fixes a denial of service when handling malformed XML CVE-2009-3720 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2009-3720

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...

BELL-CVE-2009-3720 CVE-2009-3720 does not affect BellSoft software

Bulletin has no description...

CVE-2009-3720

CVE-2009-3720 affects Expat 2.0.1 (libexpat) and its use in Python, PyXML, w3c-libwww, etc. Root cause: in lib/xmltok_impl.c, updatePosition handles crafted UTF-8 sequences, causing a buffer over-read and potential application crash (DoS). Connected documents confirm exploits are not detailed bey...

CVE-2009-3720

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...

Mandriva Linux Security Advisory : python-celementtree (MDVSA-2009:214)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2009:217-3)

A number of security vulnerabilities have been discovered in Mozilla Thunderbird : Security issues in thunderbird could lead to a man-in-the-middle attack via a spoofed X.509 certificate CVE-2009-2408. A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be...

Mandriva Linux Security Advisory : python (MDVSA-2009:212-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

CVE-2009-2625

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service infinite loop and application hang via malformed XML input, as...

Fedora Core 9 FEDORA-2009-3720 (argyllcms)

The remote host is missing an update to argyllcms announced via advisory FEDORA-2009-3720. OpenVAS Vulnerability Test $Id: fcore20093720.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3720 argyllcms Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 9 FEDORA-2009-3720 (argyllcms)

The remote host is missing an update to argyllcms announced via advisory FEDORA-2009-3720. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2008-3720

CVE-2008-3720 describes a SQL injection vulnerability in DeeEmm CMS (DMCMS) 0.7.4, where remote attackers can execute arbitrary SQL commands through the page parameter of index.php. The vulnerability is noted as overlapping with CVE-2007-5679 (id parameter in media page), indicating a reused vuln...

CVE-2008-3720

creationtimestamp| type| source ---|---|--- 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6250...

CVE-2007-3720

The CVE-2007-3720 entry describes a vulnerability in the Linux kernel 2.4 process scheduler that uses CPU billing from periodic sampling ticks. This design allows local users to cause a denial of service (CPU consumption) by calling voluntary nanosecond sleeps, making the process inactive during ...

Firewall / Proxy / NAT Dependency

Binary data 3720.prm...

CVE-2006-3720

Technical details are not publicly provided in the supplied documents. Monitor for updates on CVE-2006-3720.

CVE-2005-3720

Hitachi WirelessIP5000 VOIP WiFi Phone 1.5.6 has a vulnerable HTTP server where the default index page exposes sensitive information (e.g., software versions). Connected sources also enumerate additional issues (e.g., unauthorized HTTP server access under factory default config and SNMP/administr...