CVE-2008-4226 Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large X...
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xmlsoft libxml | = 2.7.2 | No fix listed |
| debian/libxml2(Debian:12) | < 2.6.32.dfsg-5 | 2.6.32.dfsg-5 |
| debian/libxml2(Debian:13) | < 2.6.32.dfsg-5 | 2.6.32.dfsg-5 |
| debian/libxml2(Debian:14) | < 2.6.32.dfsg-5 | 2.6.32.dfsg-5 |
References
- HPSBMA02492 vendor-advisory
- APPLE-SA-2009-06-17-1 vendor-advisory
- APPLE-SA-2009-06-08-1 vendor-advisory
- SUSE-SR:2008:026 vendor-advisory
- 32762 third-party-advisory vendor-advisory
- 32764 third-party-advisory vendor-advisory
- 32766 third-party-advisory vendor-advisory
- 32773 third-party-advisory vendor-advisory
- 32802 third-party-advisory vendor-advisory
- 32807 third-party-advisory vendor-advisory
- 32811 third-party-advisory vendor-advisory
- 32872 third-party-advisory
- 32974 third-party-advisory
- 33417 third-party-advisory
- 33746 third-party-advisory
- 33792 third-party-advisory
- 34247 third-party-advisory
- 35379 third-party-advisory
- 36173 third-party-advisory
- 36235 third-party-advisory
- GLSA-200812-06 vendor-advisory
- 1021238 vdb-entry
- SSA:2008-324-01 vendor-advisory
- sunsolve.sun.com
- sunsolve.sun.com
- 251406 vendor-advisory
- 261688 vendor-advisory
- 265329 vendor-advisory
- support.apple.com
- support.apple.com
- support.avaya.com
- support.avaya.com
- wiki.rpath.com
- DSA-1666 patch vendor-advisory
- MDVSA-2008:231 vendor-advisory
- 49993 vdb-entry
- RHSA-2008:0988 vendor-advisory
- 32326 vdb-entry
- USN-673-1 vendor-advisory
- www.vmware.com
- ADV-2008-3176 vdb-entry
- ADV-2009-0034 vdb-entry
- ADV-2009-0301 vdb-entry
- ADV-2009-0323 vdb-entry
- ADV-2009-1522 vdb-entry
- ADV-2009-1621 vdb-entry
- admin.fedoraproject.org patch
- admin.fedoraproject.org patch
- bugzilla.redhat.com
- oval:org.mitre.oval:def:6219 signature vdb-entry
- oval:org.mitre.oval:def:6360 signature vdb-entry
- oval:org.mitre.oval:def:9888 signature vdb-entry
- FEDORA-2008-9729 vendor-advisory
- FEDORA-2008-9773 vendor-advisory
- Debian Security Tracker CVE-2008-4226 vendor-advisory