CVE-2008-4226

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a large XML document...

CVE-2008-4226

The CVE-2008-4226 flaw is an integer overflow in libxml2 (xmlSAX2Characters) in version 2.7.2 that can cause memory corruption, denial of service, or possibly remote code execution when processing large XML documents. Multiple distributions and advisories show patched/libxml2 updates (e.g., libxm...

CVE-2008-4225: Undefined Security Weakness

Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service infinite loop via a large XML document...

Security fix for the ALT Linux 5 package libxml2 version 1:2.7.2-alt2

Nov. 25, 2008 Alexey Tourbin 1:2.7.2-alt2 - updated to svn revision 3803 fixes CVE-2008-4225, CVE-2008-4226...

Security fix for the ALT Linux 9 package libxml2 version 1:2.7.2-alt2

Nov. 25, 2008 Alexey Tourbin 1:2.7.2-alt2 - updated to svn revision 3803 fixes CVE-2008-4225, CVE-2008-4226...

CVE-2008-4226: Undefined Security Weakness

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a large XML document...

FreeBSD Ports: libxml2

The remote host is missing an update to the system as announced in the referenced advisory. VID f1e0164e-b67b-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID f1e0164e-b67b-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1666-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 1666-1. OpenVAS Vulnerability Test $Id: deb16661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1666-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1666-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: libxml2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 10 Update: libxml2-2.7.2-2.fc10

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Fedora 9 : libxml2-2.7.2-2.fc9 (2008-9773)

Fixes a couple of security issues when overflowing text data size of buffer size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / current : libxml2 (SSA:2008-324-01)

New libxml2 packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues including a denial or service or the possible execution of arbitrary code if untrusted XML is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

FreeBSD : libxml2 -- multiple vulnerabilities (f1e0164e-b67b-11dd-a55e-00163e000016)

Secunia reports : Two vulnerabilities have been reported in Libxml2, which can be exploited by malicious people to cause a DoS Denial of Service or to potentially compromise an application using the library. 1 An integer overflow error in the 'xmlSAX2Characters' function can be exploited to trigg...

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 5756)

This update fixes an integer overflow in libxml2 that could lead to memory corruption and arbitrary code execution. CVE-2008-4226 Thanks to: Drew Yao of Apple Product Security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Fedora 8 : libxml2-2.7.2-2.fc8 (2008-9729)

Fixes a couple of security issues when overflowing text data size of buffer size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

openSUSE 10 Security Update : libxml2 (libxml2-5754)

This update fixes an integer overflow in libxml2 that could lead to memory corruption and arbitrary code execution. CVE-2008-4226 Thanks to: Drew Yao of Apple Product Security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues including a denial or service or the possible execution of arbitrary code if untrusted XML is processed. More details about the issues may be found in the Common Vulnerabilitie...

libxml2 xmlSAX2Characters()函数整数溢出漏洞

BUGTRAQ ID: 32326 CVECAN ID: CVE-2008-4226 libxml软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml2库的xmlSAX2Characters函数中存在整数溢出漏洞，如果用户受骗使用链接到该库的应用程序打开了超大的XML文件的话，就可以触发这个溢出，导致执行任意指令。 XMLSoft Libxml2 2.7.2 Debian ------ Debian已经为此发布了一个安全公告（DSA-1666-1）以及相应补丁: DSA-1666-1：New libxml2 packages fix...

[SECURITY] Fedora 8 Update: libxml2-2.7.2-2.fc8

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...