HTTP: libxml2 XML File Processing Long Entity Name Buffer Overflow

This signature detects attempts to exploit a known vulnerability in libxml2 XML library. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

The 'libxml' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary within the context of an application using the affected library. Failed exploit attempts will result in a denial-of-service vulnerability.

Affected Products

Apple iphone,Avaya proactive_contact

References

BugTraq: 31126

CVE: CVE-2008-3529

Short Name

HTTP:STC:DL:LIBXML2-ENTRY-NAME

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: libxml2 XML File Processing Long Entity Name Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?