CVE-2007-6284

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.

🔗 References (84)

• secalert@redhathttp://bugs.gentoo.org/show_bug.cgi?id=202628
• secalert@redhathttp://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html
• secalert@redhathttp://lists.vmware.com/pipermail/security-announce/2008/000009.html
• secalert@redhathttp://mail.gnome.org/archives/xml/2008-January/msg00036.html
• secalert@redhathttp://secunia.com/advisories/28439
• secalert@redhathttp://secunia.com/advisories/28444
• secalert@redhathttp://secunia.com/advisories/28450
• secalert@redhathttp://secunia.com/advisories/28452
• secalert@redhathttp://secunia.com/advisories/28458
• secalert@redhathttp://secunia.com/advisories/28466
• secalert@redhathttp://secunia.com/advisories/28470
• secalert@redhathttp://secunia.com/advisories/28475
• secalert@redhathttp://secunia.com/advisories/28636
• secalert@redhathttp://secunia.com/advisories/28716
• secalert@redhathttp://secunia.com/advisories/28740