CVE-2007-6284
- State
- Published
- Severity
- Not scored
- Published
- Jan 12, 2008
- Updated
- Aug 7, 2024
- Reserved
- Dec 10, 2007
Description
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 28439third-party-advisory
- GLSA-200801-20vendor-advisory
- 28466third-party-advisory
- ADV-2008-1033vdb-entry
- 103201vendor-advisory
- DSA-1461vendor-advisory
- USN-569-1vendor-advisory
- SUSE-SR:2008:002vendor-advisory
- 20080329 VMSA-2008-0006 Updated libxml2 service console packagemailing-list
- oval:org.mitre.oval:def:5216vdb-entrysignature
- 27248vdb-entry
- 28444third-party-advisory
- MDVSA-2008:010vendor-advisory
- ADV-2008-0117vdb-entry
- http://www.xmlsoft.org/news.html
- 28716third-party-advisory
- 28740third-party-advisory
- [xml] 20080111 Security flaw affecting all previous libxml2 releasesmailing-list
- FEDORA-2008-0462vendor-advisory
- 28475third-party-advisory
- oval:org.mitre.oval:def:11594vdb-entrysignature
- 20080115 rPSA-2008-0017-1 libxml2mailing-list
- APPLE-SA-2008-07-11vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-047.htm
- ADV-2008-0144vdb-entry
- 28458third-party-advisory
- 29591third-party-advisory
- ADV-2008-2094vdb-entry
- 28636third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-050.htm
- https://issues.rpath.com/browse/RPL-2121
- [Security-announce] 20080328 VMSA-2008-0006 Updated libxml2 service console packagemailing-list
- RHSA-2008:0032vendor-advisory
- FEDORA-2008-0477vendor-advisory
- 28470third-party-advisory
- 201514vendor-advisory
- 28450third-party-advisory
- 31074third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=425927
- http://bugs.gentoo.org/show_bug.cgi?id=202628
- 28452third-party-advisory
- 1019181vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.