Mozilla / Firefox / Firebird / Netscape array overflow

Array ovrflow on high marquee tag recursion level...

DoS against multiple e-mail applications and anti-viruses

MIME messages with large recursion level may cause application to hang or crash...

GLSA-200812-06 : libxml2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-06 libxml2: Multiple vulnerabilities Multiple vulnerabilities were reported in libxml2: Andreas Solberg reported that libxml2 does not properly detect recursion during entity expansion in an attribute value CVE-2008-3281. A...

ClamAV antivirus JPEG files DoS

Endless recursion on malformed JPEG file processing...

dns-recursion NSE Script

Checks if a DNS server allows queries for third-party names. It is expected that recursion will be enabled on your own internal nameservers. Example Usage nmap -sU -p 53 --script=dns-recursion Script Output PORT STATE SERVICE REASON 53/udp open domain udp-response |dns-recursion: Recursion appear...

FreeBSD Ports: libxml2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 9 : libxml2-2.6.32-3.fc9 (2008-7395)

Mon Aug 25 2008 Daniel Veillard 2.6.31-3.fc9 - fix for entities recursion problem - Resolve: rhbz459713 - Thu May 15 2008 Daniel Veillard 2.6.31-2.fc9 - try to fix multiarch problems like 440206 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 8 : libxml2-2.6.32-2.fc8 (2008-7724)

Mon Aug 25 2008 Daniel Veillard 2.6.31-2.fc8 - fix for entities recursion problem - Resolve: rhbz459712 - Fri Apr 11 2008 Daniel Veillard 2.6.32-1.fc8 - upstream release 2.6.32 see http://xmlsoft.org/news.html - many bugs fixed upstrea - Fri Jan 11 2008 Daniel Veillard 2.6.31-1.fc8 - upstream...

FreeBSD Ports: powerdns

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: powerdns

The remote host is missing an update to the system as announced in the referenced advisory. VID 43a7b0a7-f9bc-11d9-b473-00061bc2ad93 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: bind

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2003-1564

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka the "billion laughs...

[Advisory] Invision Power Board <= 2.3.5 Multiple Vulnerabilities and Security Bypass

Title: Invision Power Board = 2.3.5 Multiple Vulnerabilities and Security Bypass Vendor: http://www.invisionpower.com/community/board/ Advisory: http://acid-root.new.fr/?0:18 Author: DarkFig gmdarkfig at gmail dot com Released on: 2008/08/29 Changelog: 2008/08/29 Summary: Introduction Blind SQL...

DEBIAN-CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

Code injection

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

libxml2 -- two vulnerabilities

Secunia reports: Two vulnerabilities have been reported in Libxml2, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise an application using the library. 1 A recursion error exists when processing certain XML content. This can be exploited to e.g...

PT-2008-1091 · Xmlsoft +1 · Libxml2 +1

Name of the Vulnerable Software and Affected Versions: libxml2 versions 2.6.32 and earlier Description: The issue allows context-dependent attackers to cause a denial of service, consuming memory and CPU, via a crafted XML document. This is due to improper detection of recursion during entity...