CVE-2008-4226

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.

🔗 References (108)

• cve@mitrehttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
• cve@mitrehttp://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
• cve@mitrehttp://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
• cve@mitrehttp://secunia.com/advisories/32762
• cve@mitrehttp://secunia.com/advisories/32764
• cve@mitrehttp://secunia.com/advisories/32766
• cve@mitrehttp://secunia.com/advisories/32773
• cve@mitrehttp://secunia.com/advisories/32802
• cve@mitrehttp://secunia.com/advisories/32807
• cve@mitrehttp://secunia.com/advisories/32811
• cve@mitrehttp://secunia.com/advisories/32872
• cve@mitrehttp://secunia.com/advisories/32974
• cve@mitrehttp://secunia.com/advisories/33417
• cve@mitrehttp://secunia.com/advisories/33746