Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
History
No history.
Information
Published : 2009-08-11 18:30
Updated : 2026-06-16 23:09
NVD link : CVE-2009-2416
Mitre link : CVE-2009-2416
CVE.ORG link : CVE-2009-2416
JSON object : View
Products Affected
apple
- iphone_os
- mac_os_x_server
- safari
- mac_os_x
fedoraproject
- fedora
sun
- openoffice.org
vmware
- vcenter_server
- vma
- esxi
- esx
xmlsoft
- libxml2
- libxml
opensuse
- opensuse
redhat
- enterprise_linux
suse
- linux_enterprise
- linux_enterprise_server
debian
- debian_linux
canonical
- ubuntu_linux
- chrome
CWE
CWE-416
Use After Free
