CVE-2008-4226

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1710%

EPSS Percentile4.57th

Published2008年11月25日

Last Modified2026年4月23日

Vulnerability Description

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.

Affected Platforms (CPE)

📦

Xmlsoft

Libxml

= 2.7.2

References & Advisories

🔗 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444

🔗 http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

🔗 http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html

🔗 http://secunia.com/advisories/32762

🔗 http://secunia.com/advisories/32764

🔗 http://secunia.com/advisories/32766

🔗 http://secunia.com/advisories/32773

Vulnerability Description

Affected Platforms (CPE)

Libxml

References & Advisories

相关漏洞威胁