oss-sec mailing list archives
Re: Re: [vendor-sec] Re: [oss-security] Re: libxml2 denial of service flaw (CVE-2008-3281)
From: Vincent Danen <vdanen () linsec ca>
Date: Mon, 25 Aug 2008 12:35:46 -0600
* [2008-08-25 20:13:03 +0200] Florian Weimer wrote:
* Vincent Danen:Does anyone know if this affects anything other than librsvg?It's unclear if struct xmlEntity (especially its external allocation) is part of the public API or not. liferea 1.4.16b has this: src/xml.c: entity = (xmlEntityPtr)g_new0 (xmlEntity, 1); PHP 5.2.6 has this: ext/dom/dom_iterators.c:61: ret = (xmlEntityPtr) xmlMalloc(sizeof(xmlEntity)); ext/dom/dom_iterators.c:62: memset(ret, 0, sizeof(xmlEntity)); QT 4.4.0 has this (with an instructive comment in front of it): src/3rdparty/webkit/WebCore/dom/XMLTokenizer.cpp:static xmlEntity sharedXHTMLEntity = { (This is not the result of an exhaustive search.)
Thanks, Florian. Looks like just recompiling librsvg may not be a good idea. -- Vincent Danen @ http://linsec.ca/
Attachment:
_bin
Description:
Current thread:
- Re: libxml2 denial of service flaw (CVE-2008-3281) Robert Buchholz (Aug 23)
- Re: Re: libxml2 denial of service flaw (CVE-2008-3281) Nico Golde (Aug 24)
- Re: Re: libxml2 denial of service flaw (CVE-2008-3281) Nico Golde (Aug 24)
- Re: Re: libxml2 denial of service flaw (CVE-2008-3281) Vincent Danen (Aug 25)
- Re: Re: libxml2 denial of service flaw (CVE-2008-3281) Tomas Hoger (Aug 25)
- Re: Re: libxml2 denial of service flaw (CVE-2008-3281) Vincent Danen (Aug 25)
- Re: [vendor-sec] Re: [oss-security] Re: libxml2 denial of service flaw (CVE-2008-3281) Florian Weimer (Aug 25)
- Re: Re: [vendor-sec] Re: [oss-security] Re: libxml2 denial of service flaw (CVE-2008-3281) Vincent Danen (Aug 25)
- Re: Re: libxml2 denial of service flaw (CVE-2008-3281) Nico Golde (Aug 24)
- Re: Re: libxml2 denial of service flaw (CVE-2008-3281) Nico Golde (Aug 24)