[ MDVSA-2008:212 ] libxml2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:212 http://www.mandriva.com/security/ Package : libxml2 Date : October 15, 2008 Affected: 2009.0 Problem Description: libxml2 version 2.7.0 and 2.7.1 did not properly handle predefined entities definitions i...

Design/Logic Flaw

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service stack consumption and crash via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file...

CVE-2008-4482

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service stack consumption and crash via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file...

CVE-2008-4429

Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote attackers to cause a denial of service memory consumption or application crash via malformed compressed files. NOTE: some of these details are obtained from third...

CVE-2008-4429

Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote attackers to cause a denial of service memory consumption or application crash via malformed compressed files. NOTE: some of these details are obtained from third...

CVE-2008-4409

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service memory consumption and application crash, as demonstrated by use of xmllint on a certain XML document, a different vulnerability th...

CVE-2008-4409

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service memory consumption and application crash, as demonstrated by use of xmllint on a certain XML document, a different vulnerability th...

CVE-2008-4409

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service memory consumption and application crash, as demonstrated by use of xmllint on a certain XML document, a different vulnerability th...

CVE-2008-4409

CVE-2008-4409 affects libxml2 (versions 2.7.0 and 2.7.1). It arises from improper handling of predefined entities definitions in entities, enabling context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by the use of xmllint on a speci...

CVE-2008-4409

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service memory consumption and application crash, as demonstrated by use of xmllint on a certain XML document, a different vulnerability th...

libxml2 - Denial of Service

source: https://www.securityfocus.com/bid/31555/info The libxml2 library is prone to a denial-of-service vulnerability caused by an error when handling files using entities in entity definitions. An attacker can exploit this issue to cause the library to consume an excessive amount of memory,...

CVE-2008-4340

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service memory consumption via an HTML document containing a carriage return "\r\n\r\n" argument to the window.open function...

Hardcoded credentials

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service memory consumption via an HTML document containing a carriage return "\r\n\r\n" argument to the window.open function...

CVE-2008-4340

CVE-2008-4340 affects Google Chrome versions 0.2.149.29 and 0.2.149.30. The issue is a denial-of-service condition where a crafted HTML document containing a CRLF sequence ("\r\n\r\n") passed to window.open can cause memory consumption. Connected sources confirm the affected versions and the vuln...

CVE-2008-4340

Removed by vendor...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

Memory corruption

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...

CVE-2008-4298

Memory leak in the httprequestparse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service memory consumption via a large number of requests with duplicate request headers...