CVE-2008-3529

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

Score

CVSS 2.0 10.0 Critical

Status

Modified - secalert@redhat.com

Published

2008-09-12

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Iphone Os (Apple)
• Mac Os X (Apple)
• Safari (Apple)
• Ubuntu Linux (Canonical)
• Debian Linux (Debian)
• Libxml2 (Xmlsoft)

References

• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
• http://lists.apple.com/archives/security-announce/2009/May/msg00000.html
• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
• http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
• http://secunia.com/advisories/31558
• http://secunia.com/advisories/31855
• http://secunia.com/advisories/31860
• http://secunia.com/advisories/31868
• http://secunia.com/advisories/31982
• http://secunia.com/advisories/32265
• http://secunia.com/advisories/32280
• http://secunia.com/advisories/32807
• http://secunia.com/advisories/32974
• http://secunia.com/advisories/33715
• http://secunia.com/advisories/33722
• http://secunia.com/advisories/35056
• http://secunia.com/advisories/35074
• http://secunia.com/advisories/35379
• http://secunia.com/advisories/36173
• http://secunia.com/advisories/36235
• http://security.gentoo.org/glsa/glsa-200812-06.xml
• http://securitytracker.com/id?1020855
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-247346-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1
• http://support.apple.com/kb/HT3549
• http://support.apple.com/kb/HT3550
• http://support.apple.com/kb/HT3613