NetSight
IP …
critical10.0Public exploit code

CVE-2008-3529

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

Affected products

VendorProductAffected versions
XmlsoftLibxml2
before 2.7.0
DebianDebian Linux
Version 4.0
CanonicalUbuntu Linux
Versions 6.06, 7.04, 7.10, 8.04, 8.10, 9.04
AppleSafari
before 4.0
from 3.2.0 before 3.2.3
AppleIphone Os
before 3.0
AppleMac Os X
before 10.5.7
Version 10.5.7

Weakness classification

CWE-119

References