CVE-2008-4225

The CVE-2008-4225 issue affects libxml2 up to version 2.7.2, caused by an integer overflow in xmlBufferResize that can induce a denial-of-service (infinite loop) when processing a large XML document. Connected documents confirm the vulnerability and indicate fixes have been released in subsequent...

CVE-2008-4226

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a large XML document...

CVE-2008-4226

The CVE-2008-4226 flaw is an integer overflow in libxml2 (xmlSAX2Characters) in version 2.7.2 that can cause memory corruption, denial of service, or possibly remote code execution when processing large XML documents. Multiple distributions and advisories show patched/libxml2 updates (e.g., libxm...

CVE-2008-4226

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a large XML document...

CVE-2008-4225

Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service infinite loop via a large XML document...

Security fix for the ALT Linux 9 package libxml2 version 1:2.7.2-alt2

Nov. 25, 2008 Alexey Tourbin 1:2.7.2-alt2 - updated to svn revision 3803 fixes CVE-2008-4225, CVE-2008-4226...

Security fix for the ALT Linux 5 package libxml2 version 1:2.7.2-alt2

Nov. 25, 2008 Alexey Tourbin 1:2.7.2-alt2 - updated to svn revision 3803 fixes CVE-2008-4225, CVE-2008-4226...

CVE-2008-4226: Undefined Security Weakness

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a large XML document...

CVE-2008-4225: Undefined Security Weakness

Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service infinite loop via a large XML document...

Debian Security Advisory DSA 1666-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 1666-1. OpenVAS Vulnerability Test $Id: deb16661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1666-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: libxml2

The remote host is missing an update to the system as announced in the referenced advisory. VID f1e0164e-b67b-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID f1e0164e-b67b-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1666-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: libxml2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 10 Update: libxml2-2.7.2-2.fc10

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Fedora 9 : libxml2-2.7.2-2.fc9 (2008-9773)

Fixes a couple of security issues when overflowing text data size of buffer size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / current : libxml2 (SSA:2008-324-01)

New libxml2 packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues including a denial or service or the possible execution of arbitrary code if untrusted XML is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

FreeBSD : libxml2 -- multiple vulnerabilities (f1e0164e-b67b-11dd-a55e-00163e000016)

Secunia reports : Two vulnerabilities have been reported in Libxml2, which can be exploited by malicious people to cause a DoS Denial of Service or to potentially compromise an application using the library. 1 An integer overflow error in the 'xmlSAX2Characters' function can be exploited to trigg...

Fedora 8 : libxml2-2.7.2-2.fc8 (2008-9729)

Fixes a couple of security issues when overflowing text data size of buffer size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 5756)

This update fixes an integer overflow in libxml2 that could lead to memory corruption and arbitrary code execution. CVE-2008-4226 Thanks to: Drew Yao of Apple Product Security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : libxml2 (libxml2-5754)

This update fixes an integer overflow in libxml2 that could lead to memory corruption and arbitrary code execution. CVE-2008-4226 Thanks to: Drew Yao of Apple Product Security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...