CVE-2008-3529 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3529
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3529

Description: Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/45085 UBUNTU http://www.ubuntu.com/usn/USN-815-1 http://www.ubuntulinux.org/support/documentation/usn/usn-644-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-247346-1 ST 1020855 SAID Secunia Advisory: SA32265 Secunia Advisory: SA33722 Secunia Advisory: SA31982 Secunia Advisory: SA33715 Secunia Advisory: SA32974 Secunia Advisory: SA32807 Secunia Advisory: SA32280 Secunia Advisory: SA31868 Secunia Advisory: SA31860 Secunia Advisory: SA31855 Secunia Advisory: SA36235 Secunia Advisory: SA36173 Secunia Advisory: SA35379 Secunia Advisory: SA31558 Secunia Advisory: SA35074 Secunia Advisory: SA35056 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0886.html http://www.redhat.com/support/errata/RHSA-2008-0884.html MISC http://xmlsoft.org/news.html MILW0RM http://www.milw0rm.com/exploits/8798 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:192 GENTOO http://security.gentoo.org/glsa/glsa-200812-06.xml DEBIAN http://www.debian.org/security/2008/dsa-1654 CONFIRM http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1 http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1 http://support.apple.com/kb/HT3639 http://support.apple.com/kb/HT3613 http://support.apple.com/kb/HT3549 http://support.apple.com/kb/HT3550 http://support.avaya.com/elmodocs2/security/ASA-2008-400.htm http://support.avaya.com/elmodocs2/security/ASA-2009-025.htm http://wiki.rpath.com/Advisories:rPSA-2008-0325 CERT http://www.us-cert.gov/cas/techalerts/TA09-133A.html BID 31126 APPLE http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://lists.apple.com/archives/security-announce/2009/May/msg00000.html

Return to the previous page.