Mandriva: Subject: [Security Announce] [ MDVSA-2009:200 ] libxml

iBot · #1 (**permalink**) 08-12-2009

LinuxSecurity.com: Multiple vulnerabilities has been found and corrected in libxml: Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework (CVE-2009-2414). Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework (CVE-2009-2416). This update provides a solution to these vulnerabilities.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Mandriva: Subject: [Security Announce] [ MDVSA-2009:180 ] compface	iBot	Security Advisories (RSS)	0	07-29-2009 04:15 PM
Mandriva: Subject: [Security Announce] [ MDVSA-2009:124-1 ] apache	iBot	Security Advisories (RSS)	0	07-09-2009 12:45 PM
Mandriva: Subject: [Security Announce] [ MDVSA-2009:122 ] squirrelmail	iBot	Security Advisories (RSS)	0	05-23-2009 03:15 PM
Mandriva: Subject: [Security Announce] [ MDVSA-2009:117 ] ntp	iBot	Security Advisories (RSS)	0	05-19-2009 01:15 PM
Mandriva: Subject: [Security Announce] [ MDVSA-2009:003 ] python	iBot	Security Advisories (RSS)	0	01-12-2009 06:40 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode	Rate This Thread:


	Powered by