NVD

Id
50759  
Name
CVE-2009-3560  
Description
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-12-04  
Modified Date
2016-08-22  
Seq
2009-3560  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256740 50759 CVE-2009-3560 http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?r1=1.164&r2=1.165  View
256741 50759 CVE-2009-3560 http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmlparse.c?view=log#rev1.165  View
256742 50759 CVE-2009-3560 SUSE-SR:2010:001  View
256743 50759 CVE-2009-3560 SUSE-SR:2010:011  View
256744 50759 CVE-2009-3560 SUSE-SR:2010:012  View
256745 50759 CVE-2009-3560 SUSE-SR:2010:013  View
256746 50759 CVE-2009-3560 SUSE-SR:2010:014  View
256747 50759 CVE-2009-3560 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
256748 50759 CVE-2009-3560 [expat-bugs] 20091108 [ expat-Bugs-2894085 ] expat: buffer over-read and crash in big2_toUtf8()  View
256749 50759 CVE-2009-3560 HPSBUX02645  View
256750 50759 CVE-2009-3560 oval:org.mitre.oval:def:10613  View
256751 50759 CVE-2009-3560 oval:org.mitre.oval:def:12942  View
256752 50759 CVE-2009-3560 oval:org.mitre.oval:def:6883  View
256753 50759 CVE-2009-3560 SSA:2011-041-02  View
256754 50759 CVE-2009-3560 273630  View
256755 50759 CVE-2009-3560 DSA-1953  View
256756 50759 CVE-2009-3560 MDVSA-2009:316  View
256757 50759 CVE-2009-3560 RHSA-2011:0896  View
256758 50759 CVE-2009-3560 37203  View
256759 50759 CVE-2009-3560 1023278  View
256760 50759 CVE-2009-3560 USN-890-1  View
256761 50759 CVE-2009-3560 USN-890-6  View
256762 50759 CVE-2009-3560 ADV-2010-0528  View
256763 50759 CVE-2009-3560 ADV-2010-0896  View
256764 50759 CVE-2009-3560 ADV-2010-1107  View
256765 50759 CVE-2009-3560 ADV-2011-0359  View
256766 50759 CVE-2009-3560 https://bugzilla.redhat.com/show_bug.cgi?id=533174  View
256767 50759 CVE-2009-3560 FEDORA-2009-12690  View
256768 50759 CVE-2009-3560 FEDORA-2009-12716  View
256769 50759 CVE-2009-3560 FEDORA-2009-12737  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41408 JVNDB-2009-002415 Expat の big2_toUtf8 関数におけるサービス運用妨害 (DoS) の脆弱性 Perl 用の XML-Twig モジュールで使用される Expat の libexpat の lib/xmltok.c の big2_toUtf8 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-3560 40991 CVE-2009-3560 50759 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002415.html 2009-12-04 2012-12-18 View