CVE-2009-3560
EPSS 3.0%expat - regression fix
發布日:2009/12/4修改日:2026/5/7
描述
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
受影響套件(19)
- Debian/audacityfrom 0, < 1.3.2-1
- Debian/cadaverfrom 0
- Debian/cmakefrom 0, < 2.6.0-6
- Debian/coin3from 0, < 4.0.0~CMake~6f54f1602475+ds1-1
- Debian/expatfrom 0, < 2.0.1-6
- Debian/expatfrom 0, < 1.95.8-3.4+etch2
- Debian/expatfrom 0, < 1.95.8-3.4+etch3
- Debian/gdcmfrom 0, < 2.0.14-2
- Debian/ghostscriptfrom 0, < 8.71~dfsg-2
- Debian/libxmltokfrom 0
- Debian/matanzafrom 0
- Debian/mcabberfrom 0, < 0.10.0-1
- Debian/paraviewfrom 0, < 3.6.2-1
- Debian/pocofrom 0, < 1.3.6p1-1
- Debian/simgearfrom 0, < 2.10.0-1
- Debian/tdomfrom 0, < 0.8.3~20080525-1
- Debian/tlafrom 0, < 1.3.5+dfsg-15
- Debian/udunitsfrom 0, < 2.1.8-4
- Debian/xmlrpc-cfrom 0, < 1.06.27-1.1