CVE-2004-2160 Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code.
MediumCVSS 6.4
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xmlstarlet command line xml toolkit | = 0.9.3 | No fix listed |
| debian/xmlstarlet(Debian:12) | < 1.0.0-1 | 1.0.0-1 |
| debian/xmlstarlet(Debian:13) | < 1.0.0-1 | 1.0.0-1 |
| debian/xmlstarlet(Debian:14) | < 1.0.0-1 | 1.0.0-1 |
References
- cvs.sourceforge.net
- sourceforge.net patch
- Debian Security Tracker CVE-2004-2160 vendor-advisory