CVE-2009-0783

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the 1 web.xml, 2 context.xml, or 3 tld files of arbitrary web applications via a crafted...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2008:231)

Drew Yao of the Apple Product Security Team found two flaws in libxml2. The first is a denial of service flaw in libxml2's XML parser. If an application linked against libxml2 were to process certain malformed XML content, it cause the application to enter an infinite loop CVE-2008-4225. The seco...

CentOS 3 / 4 / 5 : libxml2 (CESA-2008:0988)

Updated libxml2 packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. libxml2 is a library for parsing and manipulating XML files. It includes support...

Apple Safari XML解析器嵌套XML标记远程拒绝服务漏洞

BUGTRAQ ID: 34318 CNCAN ID：CNCAN-2009040101 Apple Safari是一款流行的WEB浏览器。 Apple Safari处理XML标签存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建包含嵌套的XML标签的WEB页，诱使Apple Safari解析，可导致应用程序崩溃。 Apple Safari 3.2.2 for Windows Apple Safari 4 Beta Apple Safari 3.2 目前没有解决方案提供： http://www.apple.com/ Author : Ahmed Obied...

CVE-2008-6563

Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...

Buffer overflow

Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...

CVE-2008-6563

Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...

CVE-2008-6563

CVE-2008-6563 describes a buffer overflow in the XML parser of Trillian, affected as of version 3.1.9.0 (and possibly earlier). A crafted DTD file can be used by a remote attacker to cause a crash and potentially execute arbitrary code. Public references consistently name Trillian Buffer Overflow...

Mozilla Firefox 3.0.x - XML Parser Memory Corruption Denial of Service (PoC)

Mozilla Firefox 3.0.x - XML Parser Memory Corruption Denial of Service PoC Firefox memory corruption PoC/DoS in XUL XML parser https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/8306.rar 2009-Firefox-XUL-0day-PoC.rar milw0rm.com 2009-03-30...

Mozilla Firefox 3.0.x - XML Parser Memory Corruption / Denial of Service (PoC)

Firefox memory corruption PoC/DoS in XUL XML parser https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/8306.rar 2009-Firefox-XUL-0day-PoC.rar milw0rm.com 2009-03-30...

Firefox 3.0.x (XML Parser) Memory Corruption / DoS PoC

Exploit for unknown platform in category dos / poc ====================================================== Firefox 3.0.x XML Parser Memory Corruption / DoS PoC ====================================================== Firefox memory corruption PoC/DoS in XUL XML parser...

GLSA-200903-19 : Xerces-C++: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200903-19 Xerces-C++: Denial of Service Frank Rast reported that the XML parser in Xerces-C++ does not correctly handle an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during the...

Xerces-C++: Denial of service

Background Xerces-C++ is a validating XML parser written in a portable subset of C++. Description Frank Rast reported that the XML parser in Xerces-C++ does not correctly handle an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during the validatio...

RedHat Update for libxml2 RHSA-2008:0988-01

Check for the Version of libxml2 OpenVAS Vulnerability Test RedHat Update for libxml2 RHSA-2008:0988-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for libxml2 CESA-2008:0988 centos3 x86_64

Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2008:0988 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libxml2 CESA-2008:0988 centos3 x86_64

Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2008:0988 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libxml2 CESA-2008:0988 centos4 i386

Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2008:0988 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Amaya Web Editor XML and HTML parser Vulnerabilities

Exploit for unknown platform in category dos / poc ==================================================== Amaya Web Editor XML and HTML parser Vulnerabilities ==================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs...

Debian: Security Advisory (DSA-1695-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1695-1 (ruby1.8, ruby1.9)

The remote host is missing an update to ruby1.8, ruby1.9 announced via advisory DSA 1695-1. OpenVAS Vulnerability Test $Id: deb16951.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1695-1 ruby1.8, ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2009...