|
|
| |
|
| |
libxml: multiple vulnerabilities
| Package(s): | libxml |
CVE #(s): | CVE-2009-2414
CVE-2009-2416
|
| Created: | August 11, 2009 |
Updated: | September 22, 2010 |
| Description: |
From the Red Hat advisory:
A stack overflow flaw was found in the way libxml processes the root XML
document element definition in a DTD. A remote attacker could provide a
specially-crafted XML file, which once opened by a local, unsuspecting
user, would lead to denial of service (application crash). (CVE-2009-2414)
Multiple use-after-free flaws were found in the way libxml parses the
Notation and Enumeration attribute types. A remote attacker could provide
a specially-crafted XML file, which once opened by a local, unsuspecting
user, would lead to denial of service (application crash). (CVE-2009-2416)
|
| Alerts: |
|
( Log in to post comments)
|
|
|