The vulnerability of the parse_stream() function in the Expat.xs component of the libxml-parser-perl library allows a attacker to cause a denial-of-service attack.

The vulnerability of the parsestream function in the Expat.xs component of the libxml-parser-perl library is related to the escape character being output outside of the buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2006-10002: Heap-based Buffer Overflow

XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption double free or corruption and crashes. A :utf8 PerlIO layer, parsestream in Expat.xs could overflow the XML input buffer because Perl's read returns decoded characters while SvPV gives...