Secunia

infamous41md has reported a vulnerability in Libxml2, which potentially can be exploited by malicious people to compromise a vulnerable system.

1) The vulnerability is caused by a boundary error in the parsing of URLs with ftp information because user supplied data is copied into a fixed size buffer. This can potentially be exploited by malicious people by sending malicious XML documents to applications using the vulnerable part of the Libxml2 code.

2) The vulnerability is caused by a boundary error in the parsing of proxy URLs with ftp information because user supplied data is copied into a fixed size buffer. This can potentially be exploited by malicious people by sending malicious XML documents to applications using the vulnerable part of the Libxml2 code.

3) The vulnerability is caused by various boundary errors in the handling of DNS replies. This can potentially be exploited by malicious people by sending malicious DNS replies to applications using the vulnerable part of the Libxml2 code.

These vulnerabilities has been reported in libxml2-2.6.13 and libxml2-2.6.12. Other versions may also be vulnerable.

Solution
Update to version 2.6.15.
Further details available in Customer Area

Provided and/or discovered by
infamous41md

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area