CVE-2008-3529

Published: Sep 12, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

Affected (15)

Products: Xmlsoft: Libxml2 · Debian: Debian Linux · Canonical: Ubuntu Linux · +1 more

Show all products

Xmlsoft: Libxml2 · Debian: Debian Linux · Canonical: Ubuntu Linux · Apple: Iphone Os, Mac Os X, Safari

1 product

1 product

1 product

3 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	Before 2.7.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 3.0
Apple Mac Os X	Before 10.5.7
Apple Mac Os X	Version 10.5.7
Apple Safari	Before 4.0
Apple Safari	From 3.2.0 to 3.2.3

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (106)

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2009/May/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Source: secalert@redhat.com

Broken LinkMailing List

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/31558

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31855

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31860

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31868

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31982

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/32265

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/32280

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/32807

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/32974

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/33715

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/33722

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/35056

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/35074

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/35379

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/36173

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/36235

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200812-06.xml

Source: secalert@redhat.com

Third Party Advisory

http://securitytracker.com/id?1020855

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-26-247346-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1

Source: secalert@redhat.com

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1

Source: secalert@redhat.com

Broken Link

http://support.apple.com/kb/HT3549

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3550

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3613

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3639

Source: secalert@redhat.com

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-400.htm

Source: secalert@redhat.com

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2009-025.htm

Source: secalert@redhat.com

Third Party Advisory

http://wiki.rpath.com/Advisories:rPSA-2008-0325

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2008/dsa-1654

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:192

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0884.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0886.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/31126

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-815-1

Source: secalert@redhat.com

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2008/2822

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/1297

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/1298

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/1522

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/1621

Source: secalert@redhat.com

Third Party Advisory

http://xmlsoft.org/news.html

Source: secalert@redhat.com

Release NotesVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=461015

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/45085

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11760

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6103

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/644-1/

Source: secalert@redhat.com

Third Party Advisory

https://www.exploit-db.com/exploits/8798

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html