|
|
|
 |
Vulnerability Note VU#493966Libxml2 URI parsing errors in nanohttp and nanoftpOverviewLibxml is the XML parser for Gnome, a desktop suite and development platform for Linux systems. Libxml2, the latest version of the library as of this writing, has a buffer overflow vulnerability which may allow execution of arbitrary code.I. DescriptionGnome, a desktop suite and development platform for Linux systems, uses Libxml as an XML parser to handle encoding and decoding or URI strings (this is part of the GNOME XML Toolkit). The Libxml2 release of Libxml prior to version 2.6.6 (published Feb 12 2004) contains a buffer overflow vulnerability when parsing URI strings in XML-structrued files. If the URI is over 4096 bytes, it may be possible to crash software using a vulnerable version of Libxml2.II. ImpactThe complete impact of this vulnerability is not yet known. It is reported to cause a SEGV in software using a vulnerable version of Libxml2.III. SolutionUpdate to Libxml2 version 2.6.6 or later at http://www.xmlsoft.org/downloads.htmlSystems Affected
References
Thanks to Yuuichi Teranishi for finding this vulnerability. This document was written by Jeffrey S. Havrilla.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Get Adobe Reader