CVE-2008-3529
- State
- Published
- Severity
- Not scored
- Published
- Sep 12, 2008
- Updated
- Aug 7, 2024
- Reserved
- Aug 7, 2008
Description
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-815-1vendor-advisory
- USN-644-1vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-400.htm
- http://support.apple.com/kb/HT3639
- 31860third-party-advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1
- 32280third-party-advisory
- 31855third-party-advisory
- ADV-2009-1621vdb-entry
- libxml2-entitynames-bo(45085)vdb-entry
- http://support.apple.com/kb/HT3549
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1
- 32807third-party-advisory
- APPLE-SA-2009-06-08-1vendor-advisory
- 31982third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=461015
- 31868third-party-advisory
- DSA-1654vendor-advisory
- http://xmlsoft.org/news.html
- oval:org.mitre.oval:def:6103vdb-entrysignature
- ADV-2009-1298vdb-entry
- 35074third-party-advisory
- 8798exploit
- 36173third-party-advisory
- RHSA-2008:0884vendor-advisory
- ADV-2009-1522vdb-entry
- 1020855vdb-entry
- 32265third-party-advisory
- GLSA-200812-06vendor-advisory
- APPLE-SA-2009-06-17-1vendor-advisory
- 33715third-party-advisory
- SUSE-SR:2008:018vendor-advisory
- 35056third-party-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0325
- 247346vendor-advisory
- APPLE-SA-2009-05-12vendor-advisory
- 31126vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2009-025.htm
- 35379third-party-advisory
- 33722third-party-advisory
- MDVSA-2008:192vendor-advisory
- 32974third-party-advisory
- oval:org.mitre.oval:def:11760vdb-entrysignature
- 36235third-party-advisory
- TA09-133Athird-party-advisory
- 265329vendor-advisory
- ADV-2009-1297vdb-entry
- http://support.apple.com/kb/HT3550
- 261688vendor-advisory
- 31558third-party-advisory
- http://support.apple.com/kb/HT3613
- ADV-2008-2822vdb-entry
- RHSA-2008:0886vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.