CVE-2006-10002

The XML::Parser Perl module (specifically versions through 2.47 ) contains a vulnerability in the parse_stream() function of the Expat.xs component. The issue arises because the :utf8 PerlIO layer processes decoded characters from read(), while SvPV() provides multi-byte UTF-8 bytes that can exce...

CVE-2006-10003

XML::Parser (Perl) up to version 2.47 contains an off-by-one heap buffer overflow in st_serial_stack, enabling memory corruption and crashes on deeply nested XML. A patched version is available (varies by distro) — Debian fixes 2.46-2+deb11u1 and 2.47-2~deb13u1; RedHat/Debian/Linux advisories als...