CVSS: 9.8EPSS: 19%CPEs: 58EXPL: 5CVE-2011-1944 – libxmlInvalid 2.7.x - XPath Multiple Memory Corruption Vulnerabilities
https://notcve.org/view.php?id=CVE-2011-1944
02 Sep 2011 — Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions. Desbordamiento de entero en xpath.c en libxml2 v2.6.x hasta v2.6.32 y v2.7.x hasta v2.7.8, y libxml v1.8.16 y anteriores, permite a atacantes depe... • https://www.exploit-db.com/exploits/35810 • CWE-122: Heap-based Buffer Overflow CWE-189: Numeric Errors •
CVSS: 9.8EPSS: 2%CPEs: 1EXPL: 0CVE-2008-4225 – libxml2: integer overflow leading to infinite loop in xmlBufferResize
https://notcve.org/view.php?id=CVE-2008-4225
25 Nov 2008 — Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document. Desbordamiento de entero en la función xmlBufferResize de libxml2 v2.7.2; permite a atacantes dependientes del contexto provocar una denegación de servicio (bucle infinito) a través de un documento XML largo. • http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html • CWE-189: Numeric Errors CWE-190: Integer Overflow or Wraparound •
CVSS: 10.0EPSS: 3%CPEs: 1EXPL: 0CVE-2008-4226 – libxml2: integer overflow leading to memory corruption in xmlSAX2Characters
https://notcve.org/view.php?id=CVE-2008-4226
25 Nov 2008 — Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document. Desbordamiento de entero en la función xmlSAX2Characters en libxml2 2.7.2 que permite a los atacantes dependientes de contexto causar una denegación de servicios (corrupción de memoria) o posiblemente ejecutar arbitrariamente código a través de un documento largo XML • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 • CWE-190: Integer Overflow or Wraparound CWE-399: Resource Management Errors •