Mandriva Linux Security Advisory : expat (MDVSA-2009:211-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

Mandriva Linux Security Advisory : python (MDVSA-2009:212-1)

A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be exploited and lead to a denial of service attack. Related to CVE-2009-2625 CVE-2009-3720. This update fixes this vulnerability. Update : Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers...

CVE-2009-2473

Technical details for CVE-2009-2473 are not publicly available in the provided documents. Monitor for updates from official advisories.

Apache Httpd < 2.2.17 : expat DoS

A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document for example through moddav may be able to cause a crash. This crash would only be a denial of service if using the worker MPM...

Apache Httpd < 2.0.64 : expat DoS

A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document for example through moddav may be able to cause a crash. This crash would only be a denial of service if using the worker MPM...

Python Expat封装库未明XML解析远程拒绝服务漏洞

Bugraq ID: 35988 CNCAN ID：CNCAN-2009080803 Python是一款开放源代码的脚本编程语言。 Python's Expat封装库在解析XML时存在安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有更多详细信息系统。 Python Software Foundation Python 2.6.2 Python Software Foundation Python 2.5.3 Python Software Foundation Python 2.5.2 r6 Python Software Foundation Python 2.5...

CVE-2009-2625

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service infinite loop and application hang via malformed XML input, as...

GLSA-200907-03 : APR Utility Library: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200907-03 APR Utility Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the APR Utility Library: Matthew Palmer reported a heap-based buffer underflow while compiling search patterns in the...

Apache APR-Utils XML Parser Denial of Service Vulnerability

Apache APR-Utils is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache APR-util xml/apr_xml.c文件拒绝服务漏洞

BUGTRAQ ID: 35253 CVECAN ID: CVE-2009-1955 Apr-util是Apache所使用的Apache可移植运行时工具库。 APR-util库所使用的expat XML解析器（位于xml/aprxml.c文件的aprxml接口）在处理实体定义中包含有大量嵌套实体引用的XML文件时可能会耗尽所有可用的内存，导致拒绝服务的情况。所有使用APR-util库的expat wrapper接口解析不可信任XML文档的网络服务都受这个漏洞影响，如Apache httpd WebDAV模块moddav。 Apache Group APR-util 1.3.x 厂商补丁：...

DEBIAN-CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

CVE-2009-1955

The expat XML parser in the aprxml interface in xml/aprxml.c in Apache APR-util before 1.3.7, as used in the moddav and moddavsvn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via a crafted XML document containing a large number of nest...

MDKA-2007:033 : xmlrpc-epi

The xmlrpc-epi package was using an old internal copy of the expat XML parser, which caused random crashes in second-life. The updated packages provided fix this by relying on the expat system library. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is no...

expat2 -- Parser crash with specially formatted UTF-8 sequences

CVE reports: The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buff...

PT-2026-26285

Name of the Vulnerable Software and Affected Versions XML::Parser versions through 2.47 Description The software may experience a buffer overflow due to the pre-allocated buffer size being exceeded. This can lead to heap corruption, potentially resulting in a double free or other forms of...

CVE-2004-1378

The expat XML parser code, as used in the open source Jabber jabberd 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service application crash via a malformed packet to a socket that accepts XML connections...

CVE-2004-1378

The CVE-2004-1378 issue affects jabberd (open-source Jabber server) up to version 1.4.3 and earlier, where the embedded expat XML parser can be exploited by a malformed XML packet received on an XML-capable socket to trigger an application crash (DoS). Affected components include jabberd 1.4.3 an...

CVE-2004-1378

The expat XML parser code, as used in the open source Jabber jabberd 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service application crash via a malformed packet to a socket that accepts XML connections...