CVE-2007-6284
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.
- Update to 2.6.30.dfsg-3.1
Published Updated
PatchFirst · Latest vulnerabilities
libxml2 vulnerabilities · Page 7
Vulnerabilities published for libxml2 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 123
CVE-2004-0989
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
- Update to 2.6.11-5
Published UpdatedCVE-2004-0110
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.
- Update to 2.6.6-1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.