libnxml stack buffer overflow on long XML names
Programs that read news feeds can be crashed.
Summary
A stack buffer overflow in libnxml's XML name handling lets remote attackers crash programs that parse XML or RSS feeds containing long names. Versions before 0.18.6 are affected.
What to do
Update to 0.18.6 or later.
Products and platforms
CVE IDs
Sources
- Advisory: github.com (opens in a new tab)
- Write-up: github.com (opens in a new tab) · vulncheck.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen