PT-2008-1032 · Xmlsoft+1 · Libxml2+1

Publicado

2008-01-11

·

Atualizado

2024-06-15

·

CVE-2007-6284

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.6.31 libxml2 versions 2.6.26 through 2.6.30
Description The issue allows context-dependent attackers to cause a denial of service via XML containing invalid UTF-8 sequences, potentially leading to disruption of protected information. This can be exploited remotely.
Recommendations For libxml2 versions prior to 2.6.31, update to version 2.6.31 or later to resolve the issue. For libxml2 versions 2.6.26 through 2.6.30, update to version 2.6.31 or later to resolve the issue. As a temporary workaround, consider restricting the use of the xmlCurrentChar function until a patch is available.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-02619
BDU:2015-07044
BDU:2015-07046
BDU:2015-09615
CVE-2007-6284
DSA-1461-1
OPENSUSE-SU-2024:11016-1
RHSA-2008:0032
RHSA-2008_0032

Produtos afetados

Red Hat
Libxml2