K15864: libxml vulnerabilities CVE-2009-2414 and CVE-2009-2416

Security Advisory Description CVE-2009-2414 Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service application crash via a large depth of element declarations in a DTD, related to a...

Oracle Linux 5 : libxml / and / libxml2 (ELSA-2009-1206)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1206 advisory. - Fix a couple of crash CVE-2009-2414 and CVE-2009-2416 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Scientific Linux Security Update : libxml and libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-2414 libxml, libxml2, mingw32-libxml2: Stack overflow by parsing root XML element DTD definition CVE-2009-2416 libxml, libxml2, mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types A stack overflow flaw was found in the way libxml processes th...

Mandriva Security Advisory MDVSA-2009:200-1 (libxml)

The remote host is missing an update to libxml announced via advisory MDVSA-2009:200-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mac OS X : Apple Safari < 4.0.4

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.4. As such, it is potentially affected by several issues : - Multiple use-after-free issues exist in libxml2, the most serious of which could lead to a program crash. CVE-2009-2414, CVE-2009-2416 - An issue in t...

Solaris Update for XML and XSLT libraries 125732-05

Check for the Version of XML and XSLT libraries OpenVAS Vulnerability Test Solaris Update for XML and XSLT libraries 125732-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

SLES11: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-doc More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SLES9: Security update for libxml.rpm

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml libxml-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5058211...

SLES9: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5055249...

SLES9: Security update for libxml.rpm

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml libxml-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5058211...

openSUSE 10 Security Update : libxml (libxml-6477)

This update of libxml does not use pointers after they were freed anymore. CVE-2009-2416 Additionally a stack-based buffer overflow was fixed while parsing the root XML document. CVE-2009-2414 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11 Security Update : libxml2 (SAT Patch Number 1177)

This update of libxml2 does not use pointers after they were freed anymore. CVE-2009-2416 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

openSUSE Security Update : libxml (libxml-1278)

This update of libxml does not use pointers after they were freed anymore. CVE-2009-2416 Additionally a stack-based buffer overflow was fixed while parsing the root XML document. CVE-2009-2414 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Fedora Core 11 FEDORA-2009-8580 (mingw32-libxml2)

The remote host is missing an update to mingw32-libxml2 announced via advisory FEDORA-2009-8580. OpenVAS Vulnerability Test $Id: fcore20098580.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8580 mingw32-libxml2 Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-8594 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8594. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8580 (mingw32-libxml2)

The remote host is missing an update to mingw32-libxml2 announced via advisory FEDORA-2009-8580. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Fedora Core 11 FEDORA-2009-8582 (libxml)

The remote host is missing an update to libxml announced via advisory FEDORA-2009-8582. OpenVAS Vulnerability Test $Id: fcore20098582.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8582 libxml Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Google Chrome < 2.0.172.43 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 2.0.172.43. Such versions are reportedly affected by multiple issues : - A flaw in the V8 JavaScript engine might allow a specially crafted JavaScript page to access unauthorized data in memory or to execute arbitrary code...

Fedora 11 : libxml-1.8.17-24.fc11 (2009-8582)

This update includes patches from RHEL-3 addressing a number of security vulnerabilities: - CVE-2004-0110 arbitrary code execution via a long URL - CVE-2004-0989 arbitrary code execution via a long URL - CVE-2009-2414 stack consumption DoS vulnerabilities - CVE-2009-2416 use-after-free DoS...