DEBIAN-CVE-2011-1944

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when addi...

CVE-2011-1944

CVE-2011-1944 affects libxml2 and related libraries where an integer overflow in xpath.c can cause a heap-based buffer overflow when adding a new namespace node, enabling context-dependent attackers to trigger denial of service (crash) and potentially execute arbitrary code via a crafted XML file...

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

Double free

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

CVE-2011-2821: Double Free

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities

Binary data 800914.prm...

Discuz X2 SQL injection/Xpath latest vulnerability-vulnerability warning-the black bar safety net

| Vulnerability type: SQL injection/Xpath Request method: POST Affected page: http://127.0.0.1/member.php?mod=logging&action=login&loginsubmit=yes&infloat=yes&lssubmit=yes Parameters:username Parameters of the test: and 1=1 Attack details: username=1+and+1=1&cookietime=2 5 9 2 0 0...

SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities

Document Title: =============== SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities Release Date: ============= 2011-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 119 Product & Service Introduction: =============================== Die weltweit groesste SaaS...

SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities

Document Title: =============== SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities Release Date: ============= 2011-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 119 Product & Service Introduction: =============================== Die weltweit groesste SaaS...

Fedora 14 : libxml-1.8.17-27.fc14 (2011-7856)

This update addresses CVE-2011-1944 heap-based buffer overflow by adding a new namespace node to an existing nodeset or merging nodesets. It is described in detail at http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-an d-interesting.html It also fixes the broken xpath...

Fedora 15 : libxml-1.8.17-27.fc15 (2011-7820)

This update addresses CVE-2011-1944 heap-based buffer overflow by adding a new namespace node to an existing nodeset or merging nodesets. It is described in detail at http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-an d-interesting.html It also fixes the broken xpath...

CVE-2011-1944

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when addi...

libxmlInvalid 2.7.x - XPath Multiple Memory Corruption Vulnerabilities

libxmlInvalid 2.7.x - XPath Multiple Memory Corruption Vulnerabilities source: https://www.securityfocus.com/bid/48056/info The 'libxml2' library is prone to multiple memory-corruption vulnerabilities, including one that can trigger a heap-based buffer-overflow error and an integer-overflow...

libxmlInvalid 2.7.x - XPath Multiple Memory Corruption Vulnerabilities

source: https://www.securityfocus.com/bid/48056/info The 'libxml2' library is prone to multiple memory-corruption vulnerabilities, including one that can trigger a heap-based buffer-overflow error and an integer-overflow condition. An attacker can exploit these issues by enticing an unsuspecting...

openSUSE Security Update : libxml2 (openSUSE-SU-2010:1004-1)

libxml2: Invalid memory access in the xpath handling has been fixed. CVE-2010-4008 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-3459. The text...

openSUSE Security Update : libxml2 (openSUSE-SU-2011:0255-1)

A bug in the Xpath processing inside libxml2 has been fixed. CVE-2010-4494 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-3758. The text description o...