Multiple Adobe Products - XML External Entity And XML Injection Vulnerabilities

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Multiple Adobe Products XML External Entity And XML Injection Vulnerabilities CVE: CVE-2009-3960 Adobe PSIRT: APSB10-05 -...

Debian DSA-1984-1 : libxerces2-java - denial of service

It was discovered that libxerces2-java, a validating XML parser for Java, does not properly process malformed XML files. This vulnerability could allow an attacker to cause a denial of service while parsing a malformed XML file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

[SECURITY] [DSA 1984-1] New libxerces2-java packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1984-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 30, 2010 http://www.debian.org/security/faq -...

Firefox version 3.6 XML parser memory corruption proof of concept denial of service exploit

No description provided by source. Firefox version 3.6 XML parser memory corruption proof of concept denial of service exploit http://paper.sebug.net/2010-exploits/1001-exploits/Firefox-Po20100124.rar...

DSA-1984-1 libxerces2-java - denial of service

Bulletin has no description...

Opera 10.10 (XML parser) Denial of Service PoC

Exploit for unknown platform in category dos / poc ============================================== Opera 10.10 XML parser Denial of Service PoC ============================================== From tiny islands of maldivies d3b4g.info Tested: version 10.10 Tested on windows XP SP3 20-01-2010 special...

Mozilla Firefox 3.6 - XML Parser Memory Corruption (PoC) Denial of Service

Mozilla Firefox 3.6 - XML Parser Memory Corruption PoC Denial of Service Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested: version 3.6 Tested on windows XP SP3 20-01-2010 This same bug was in early version of firfox,found by Wojciech Pawlikowski This i...

Opera 10.10 - XML Parser Denial of Service (PoC)

Opera 10.10 - XML Parser Denial of Service PoC From tiny islands of maldivies d3b4g.info Tested: version 10.10 Tested on windows XP SP3 20-01-2010 special thanks to peter Van Eeckhoutte after opening the opera.html broswer hang for a while and crush.same bug in firefox too :d This vulnerability...

Firefox 3.6 (XML parser) Memory Corruption PoC/DoS

Exploit for unknown platform in category dos / poc ================================================== Firefox 3.6 XML parser Memory Corruption PoC/DoS ================================================== Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested:...

Mozilla Firefox 3.6 - XML Parser Memory Corruption (PoC) / Denial of Service

Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested: version 3.6 Tested on windows XP SP3 20-01-2010 This same bug was in early version of firfox,found by Wojciech Pawlikowski This is just a update. This vulnerability cause a denial of service memory...

Opera 10.10 - XML Parser Denial of Service (PoC)

From tiny islands of maldivies d3b4g.info Tested: version 10.10 Tested on windows XP SP3 20-01-2010 special thanks to peter Van Eeckhoutte after opening the opera.html broswer hang for a while and crush.same bug in firefox too :d This vulnerability cause a denial of service memory corruption via ...

CentOS 5 : tomcat (CESA-2009:1164)

Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP...

Trillian

Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...

[SECURITY] Fedora 12 Update: PyXML-0.8.4-17.fc12

An XML package for Python. The distribution contains a validating XML parser, an implementation of the SAX and DOM programming interfaces and an interface to the Expat parser...

Mandriva Security Advisory MDVSA-2009:215-1 (audacity)

The remote host is missing an update to audacity announced via advisory MDVSA-2009:215-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:314 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:314. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

[SECURITY] Fedora 12 Update: expat-2.0.1-8.fc12

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 11 Update: expat-2.0.1-8.fc11

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 10 Update: expat-2.0.1-8.fc10

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

CVE-2009-3560

The big2toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service application crash via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlo...