CVE-2008-4225
- State
- Published
- Severity
- Not scored
- Published
- Nov 25, 2008
- Updated
- Aug 7, 2024
- Reserved
- Sep 24, 2008
Description
Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 32766third-party-advisory
- http://support.apple.com/kb/HT3639
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1
- 32773third-party-advisory
- ADV-2009-1621vdb-entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1
- FEDORA-2008-9773vendor-advisory
- 32807third-party-advisory
- APPLE-SA-2009-06-08-1vendor-advisory
- FEDORA-2008-9729vendor-advisory
- 32764third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0001.html
- USN-673-1vendor-advisory
- ADV-2009-0301vdb-entry
- oval:org.mitre.oval:def:10025vdb-entrysignature
- 33746third-party-advisory
- 1021239vdb-entry
- https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9
- ADV-2009-0034vdb-entry
- 34247third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm
- 49992vdb-entry
- 36173third-party-advisory
- ADV-2009-1522vdb-entry
- 251406vendor-advisory
- GLSA-200812-06vendor-advisory
- APPLE-SA-2009-06-17-1vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm
- SSA:2008-324-01vendor-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0325
- DSA-1666vendor-advisory
- 32802third-party-advisory
- 35379third-party-advisory
- 32974third-party-advisory
- oval:org.mitre.oval:def:6415vdb-entrysignature
- 33792third-party-advisory
- 36235third-party-advisory
- 32762third-party-advisory
- 265329vendor-advisory
- RHSA-2008:0988vendor-advisory
- 33417third-party-advisory
- https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10
- 261688vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=470480
- MDVSA-2008:231vendor-advisory
- 32331vdb-entry
- http://support.apple.com/kb/HT3613
- ADV-2009-0323vdb-entry
- 32811third-party-advisory
- ADV-2008-3176vdb-entry
- oval:org.mitre.oval:def:6234vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.