CVE-2008-4226
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.1%
Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
Affected products
n/a · n/aReferences
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444http://lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.htmlhttps://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9https://bugzilla.redhat.com/show_bug.cgi?id=470466http://secunia.com/advisories/32762http://secunia.com/advisories/32764http://secunia.com/advisories/32766http://secunia.com/advisories/32773http://secunia.com/advisories/32802