FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-19 19:12:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
5f030587-e39a-11de-881e-001aa0166822	expat2 -- Parser crash with specially formatted UTF-8 sequences CVE reports: The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read. Discovery 2009-01-17 Entry 2009-12-08 expat2 linux-f10-expat < 2.0.1_1 CVE-2009-3720

VuXML ID

Description

5f030587-e39a-11de-881e-001aa0166822

expat2 -- Parser crash with specially formatted UTF-8 sequences

CVE reports:

The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read.

Discovery 2009-01-17
Entry 2009-12-08
expat2
linux-f10-expat

< 2.0.1_1

CVE-2009-3720