CVE-2006-10002

The XML::Parser Perl module (specifically versions through 2.47 ) contains a heap buffer overflow vulnerability in the parse_stream() function within the Expat.xs component. The root cause is a discrepancy where Perl's read() function returns decoded characters, while SvPV() returns multi-byte UT...

CVE-2006-10003

XML::Parser (Perl) up to version 2.47 contains an off-by-one heap buffer overflow in st_serial_stack, enabling memory corruption and crashes on deeply nested XML. A patched version is available (varies by distro) — Debian fixes 2.46-2+deb11u1 and 2.47-2~deb13u1; RedHat/Debian/Linux advisories als...