3312 matches found
GLSA-200903-19 : Xerces-C++: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200903-19 Xerces-C++: Denial of Service Frank Rast reported that the XML parser in Xerces-C++ does not correctly handle an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during the...
Xerces-C++: Denial of service
Background Xerces-C++ is a validating XML parser written in a portable subset of C++. Description Frank Rast reported that the XML parser in Xerces-C++ does not correctly handle an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during the validatio...
RedHat Update for libxml2 RHSA-2008:0988-01
Check for the Version of libxml2 OpenVAS Vulnerability Test RedHat Update for libxml2 RHSA-2008:0988-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CentOS Update for libxml2 CESA-2008:0988 centos4 i386
Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2008:0988 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for libxml2 CESA-2008:0988 centos3 x86_64
Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2008:0988 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for libxml2 CESA-2008:0988 centos3 x86_64
Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2008:0988 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Amaya Web Editor XML and HTML parser Vulnerabilities
Exploit for unknown platform in category dos / poc ==================================================== Amaya Web Editor XML and HTML parser Vulnerabilities ==================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs...
Debian Security Advisory DSA 1695-1 (ruby1.8, ruby1.9)
The remote host is missing an update to ruby1.8, ruby1.9 announced via advisory DSA 1695-1. OpenVAS Vulnerability Test $Id: deb16951.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1695-1 ruby1.8, ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2009...
Debian: Security Advisory (DSA-1695-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-1695-1 ruby1.8 ruby1.9 - denial of service
Bulletin has no description...
CVE-2008-5403
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag...
CVE-2008-5402
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...
Double free
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...
Heap overflow
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag...
CVE-2008-5402
Trillian has a CVE-2008-5402 vulnerability: a double-free in the XML parser before version 3.1.12.0 can enable remote code execution via crafted XML (notably the IMG SRC ID payload). Public sources (ZDI-08-078, OpenVAS entries, and NVD record) corroborate a remote memory corruption/ARiC condition...
CVE-2008-5403
CVE-2008-5403 : Heap-based buffer overflow in the XML parser of Trillian’s AIM plugin (aim.dll) allows remote attackers to execute arbitrary code when parsing malformed XML tags. Affected product: Cerulean Studios Trillian (AIM plugin). Vulnerability arises from a boundary/allocation error in XML...
CVE-2008-5402
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...
CVE-2008-5402: Undefined Security Weakness
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...
CVE-2008-5403: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag...
libxml2: Multiple vulnerabilities
Background libxml2 is the XML eXtended Markup Language C parser and toolkit initially developed for the Gnome project. Description Multiple vulnerabilities were reported in libxml2: Andreas Solberg reported that libxml2 does not properly detect recursion during entity expansion in an attribute...