two patches for parsing problems raised by ficora

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

two patches for parsing problems raised by Ficora

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of libxml does not use pointers after they were freed anymore. (CVE-2009-2416) Additionally a stack-based buffer overflow was fixed while parsing the root XML document. (CVE-2009-2414)

Multiple use-after-free vulnerabilities in libxml 1.8.17 that allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file.

This update of libxml2 does not use pointers after they were freed anymore. (CVE-2009-2416)

This update of libxml2 does not use pointers after they were freed anymore. (CVE-2009-2416) Additionally a stack-based buffer overflow was fixed while parsing the root XML document. (CVE-2009-2414)

It was discovered that libxml2 did not correctly handle root XML document element DTD definitions. If a user were tricked into processing a specially crafted XML document, a remote attacker could cause the application linked against libxml2 to crash, leading to a denial of service. (CVE-2009-2414)

It was discovered that libxml2 did not correctly parse Notation and Enumeration attribute types. If a user were tricked into processing a specially crafted XML document, a remote attacker could cause the application linked against libxml2 to crash, leading to a denial of service. (CVE-2009-2416)

USN-644-1 fixed a vulnerability in libxml2. This advisory provides the corresponding update for Ubuntu 9.04.

It was discovered that libxml2 did not correctly handle long entity names. If a user were tricked into processing a specially crafted XML document, a remote attacker could execute arbitrary code with user privileges or cause the application linked against libxml2 to crash, leading to a denial of service. (CVE-2008-3529).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2009-006 applied.

This security update contains fixes for the following products :

  - AFP Client
  - Adaptive Firewall
  - Apache
  - Apache Portable Runtime
  - ATS
  - Certificate Assistant
  - CoreGraphics
  - CUPS
  - Dictionary
  - DirectoryService
  - Disk Images
  - Event Monitor
  - fetchmail
  - FTP Server
  - Help Viewer
  - International Components for Unicode
  - IOKit
  - IPSec
  - libsecurity
  - libxml
  - OpenLDAP
  - OpenSSH
  - PHP
  - QuickDraw Manager
  - QuickLook
  - FreeRADIUS
  - Screen Sharing
  - Spotlight
  - Subversion

The remote host is running a version of Mac OS X 10.6 that is older than version 10.6.2.  Mac OS X 10.6.2 contains security fixes for the following products : 

  - Adaptive Firewall

  - Apache

  - Apache Protable Runtime

  - Certificate Assistant

  - CoreMedia

  - CUPS

  - DoveCot

  - fetchmail

  - file

  - FTP Server

  - Help Viewer

  - ImageIO

  - IOKit

  - IPSec

  - Kernel

  - Launch Services

  - libsecurity

  - libxml

 Login Window

  - OpenLDAP

  - QuickDraw Manager

QuickTime

  - Screen Sharing

  - Subversion

The version of Safari installed on the remote host is earlier than 4.0.4.  Such versions are potentially affected by multiple issues : 

  - An integer overflow exists in the handling of images with an embedded color profile, which may lead to a heap buffer overflow. (CVE-2009-2804)

  - Multiple use-after-free issues exist in libxml2, the most serious of which may lead to an unexpected application termination. (CVE-2009-2414, CVE-2009-2416)

  - An issue exists in Safari's handling of navigations initiated via the "Open Image in New Tab", "Open Image in New Window", or "Open Link in New Tab" shortcut menu options. Using these options within a maliciously crafted website could load a local HTML file, leading to the disclosure of sensitive information. (CVE-2009-2842)

  - An issue exists in WebKit's implementation of Cross-Origin Resource Sharing which could lead to cross-site request forger attacks. (CVE-2009-2816)

  - Multiple vulnerabilities exist in WebKit's handling of FTP directory listings. Accessing a maliciously crafted FTP server may lead to information disclosure, unexpected application termination, or execution of arbitrary code. (CVE-2009-3384)

  - When WebKit encounters an HTML 5 Media Element pointing to an external resource, it does not issue a resource load callback to determine if the resource should be loaded. This may result in undesired requests to remote servers. (CVE-2009-2841)

The version of Safari installed on the remote host is earlier than 4.0.4.  Such versions are potentially affected by multiple issues : 

  - An integer overflow exists in the handling of images with an embedded color profile, which may lead to a heap buffer overflow. (CVE-2009-2804)

  - Multiple use-after-free issues exist in libxml2, the most serious of which may lead to an unexpected application termination. (CVE-2009-2414, CVE-2009-2416)

  - An issue exists in Safari's handling of navigations initiated via the "Open Image in New Tab", "Open Image in New Window", or "Open Link in New Tab" shortcut menu options. Using these options within a maliciously crafted website could load a local HTML file, leading to the disclosure of sensitive information. (CVE-2009-2842)

  - An issue exists in WebKit's implementation of Cross-Origin Resource Sharing which could lead to cross-site request forger attacks. (CVE-2009-2816)

  - Multiple vulnerabilities exist in WebKit's handling of FTP directory listings. Accessing a maliciously crafted FTP server may lead to information disclosure, unexpected application termination, or execution of arbitrary code. (CVE-2009-3384)

  - When WebKit encounters an HTML 5 Media Element pointing to an external resource, it does not issue a resource load callback to determine if the resource should be loaded. This may result in undesired requests to remote servers. (CVE-2009-2841)

IAVT Reference : 2009-T-0049
STIG Finding Severity : Category I

ID	名前	製品	ファミリー	公開日	更新日	深刻度
40569	Fedora 10 : libxml2-2.7.3-2.fc10 (2009-8491)	Nessus	Fedora Local Security Checks	2009/8/12	2021/1/11	medium
40570	Fedora 11 : libxml2-2.7.3-3.fc11 (2009-8498)	Nessus	Fedora Local Security Checks	2009/8/12	2021/1/11	medium
51756	SuSE 10 Security Update : libxml (ZYPP Patch Number 6482)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	medium
56773	FreeBSD : libxml -- Multiple use-after-free vulnerabilities (ce4b3af8-0b7c-11e1-846b-00235409fd3e)	Nessus	FreeBSD Local Security Checks	2011/11/11	2021/1/6	medium
41557	SuSE 10 Security Update : libxml2 (ZYPP Patch Number 6403)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
42021	openSUSE 10 Security Update : libxml2 (libxml2-6405)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	medium
40576	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : libxml2 vulnerabilities (USN-815-1)	Nessus	Ubuntu Local Security Checks	2009/8/12	2021/1/19	critical
42433	Mac OS X Multiple Vulnerabilities (Security Update 2009-006)	Nessus	MacOS X Local Security Checks	2009/11/9	2024/5/28	critical
5227	Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2009/11/10	2019/3/6	critical
5232	Safari < 4.0.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2009/11/11	2019/3/6	medium
801003	Safari < 4.0.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2009/11/11		high
800795	Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	2009/11/10		high

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

critical

critical

critical

medium

high

high