Fedora Core 10 FEDORA-2009-11029 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-11029. OpenVAS Vulnerability Test $Id: fcore200911029.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11029 expat Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-10987 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-10987. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian Security Advisory DSA 1921-1 (expat)

The remote host is missing an update to expat announced via advisory DSA 1921-1. OpenVAS Vulnerability Test $Id: deb19211.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1921-1 expat Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SUSE: Security Summary (SUSE-SR:2009:018)

The remote host is missing updates announced in advisory SUSE-SR:2009:018. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Fedora Core 11 FEDORA-2009-11030 (PyXML)

The remote host is missing an update to PyXML announced via advisory FEDORA-2009-11030. OpenVAS Vulnerability Test $Id: fcore200911030.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11030 PyXML Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-11029 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-11029. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian: Security Advisory (DSA-1921-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 11 FEDORA-2009-10987 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-10987. OpenVAS Vulnerability Test $Id: fcore200910987.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10987 expat Authors: Thomas Reinke Copyright: Copyright c 2009...

expat: buffer over-read and crash on XML with malformed UTF-8 sequences

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...

4Suite security update

1.0-3.el48.1 - Fix an expat DoS CVE-2009-3720 Resolves: 532114...

openSUSE Security Update : expat (expat-1490)

Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat CVE-2009-3720. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update expat-149...

Fedora 10 : expat-2.0.1-5.fc10.1 (2009-11029)

This update fixes a security vulnerability: A buffer over-read flaw was found in the way Expat handles malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause applications using Expat to crash while parsing the file. CVE-2009-3720 Note that Tenable Network...

openSUSE Security Update : expat (expat-1490)

Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat CVE-2009-3720. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update expat-149...

Fedora 10 : PyXML-0.8.4-12.fc10 (2009-10949)

Switched to using system expat library. Updated expat packages are needed to fully resolve this flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : PyXML-0.8.4-16.fc11 (2009-11030)

Switched to using system expat library. Updated expat packages are needed to fully resolve this flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : expat-2.0.1-6.fc11.1 (2009-10987)

This update fixes a security vulnerability: A buffer over-read flaw was found in the way Expat handles malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause applications using Expat to crash while parsing the file. CVE-2009-3720 Note that Tenable Network...

[SECURITY] Fedora 11 Update: PyXML-0.8.4-16.fc11

An XML package for Python. The distribution contains a validating XML parser, an implementation of the SAX and DOM programming interfaces and an interface to the Expat parser...

[SECURITY] Fedora 10 Update: expat-2.0.1-5.fc10.1

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 10 Update: PyXML-0.8.4-12.fc10

An XML package for Python. The distribution contains a validating XML parser, an implementation of the SAX and DOM programming interfaces and an interface to the Expat parser...

CVE-2009-3720

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...