Notmebutwindo

**Name of the Vulnerable Software and Affected Versions** Mini-XML version 3.2 **Description** A stack buffer overflow exists in Mini-XML. When inputting an unformed XML string to the "mxmlLoadString" API, it will cause a stack-buffer-overflow in `mxml string getc`. Note that it is unclear whether this input is allowed by the API specification. **Recommendations** For Mini-XML version 3.2, as a temporary workaround, consider restricting the input to the `mxmlLoadString` API to prevent unformed XML strings until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.