K15864: libxml vulnerabilities CVE-2009-2414 and CVE-2009-2416

Security Advisory Description CVE-2009-2414 Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service application crash via a large depth of element declarations in a DTD, related to a...

Oracle Linux 5 : libxml / and / libxml2 (ELSA-2009-1206)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1206 advisory. - Fix a couple of crash CVE-2009-2414 and CVE-2009-2416 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Scientific Linux Security Update : libxml and libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-2414 libxml, libxml2, mingw32-libxml2: Stack overflow by parsing root XML element DTD definition CVE-2009-2416 libxml, libxml2, mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types A stack overflow flaw was found in the way libxml processes th...

Mandriva Security Advisory MDVSA-2009:200-1 (libxml)

The remote host is missing an update to libxml announced via advisory MDVSA-2009:200-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mac OS X : Apple Safari < 4.0.4

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.4. As such, it is potentially affected by several issues : - Multiple use-after-free issues exist in libxml2, the most serious of which could lead to a program crash. CVE-2009-2414, CVE-2009-2416 - An issue in t...

Solaris Update for XML and XSLT libraries 125732-05

Check for the Version of XML and XSLT libraries OpenVAS Vulnerability Test Solaris Update for XML and XSLT libraries 125732-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

SLES11: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-doc More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SLES9: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5055249...

SLES9: Security update for libxml.rpm

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml libxml-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5058211...

SLES9: Security update for libxml.rpm

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml libxml-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5058211...

openSUSE 10 Security Update : libxml (libxml-6477)

This update of libxml does not use pointers after they were freed anymore. CVE-2009-2416 Additionally a stack-based buffer overflow was fixed while parsing the root XML document. CVE-2009-2414 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11 Security Update : libxml2 (SAT Patch Number 1177)

This update of libxml2 does not use pointers after they were freed anymore. CVE-2009-2416 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

openSUSE Security Update : libxml (libxml-1278)

This update of libxml does not use pointers after they were freed anymore. CVE-2009-2416 Additionally a stack-based buffer overflow was fixed while parsing the root XML document. CVE-2009-2414 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8580 (mingw32-libxml2)

The remote host is missing an update to mingw32-libxml2 announced via advisory FEDORA-2009-8580. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. OpenVAS Vulnerability Test $Id: fcore20098582.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8582 libxml Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-8594 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8594. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8580 (mingw32-libxml2)

The remote host is missing an update to mingw32-libxml2 announced via advisory FEDORA-2009-8580. OpenVAS Vulnerability Test $Id: fcore20098580.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8580 mingw32-libxml2 Authors: Thomas Reinke Copyright:...

Google Chrome < 2.0.172.43 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 2.0.172.43. Such versions are reportedly affected by multiple issues : - A flaw in the V8 JavaScript engine might allow a specially crafted JavaScript page to access unauthorized data in memory or to execute arbitrary code...

Fedora 11 : mingw32-libxml2-2.7.3-2.fc11 (2009-8580)

two patches for parsing problems raised by Ficora Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...