Title: libxml2 xmlBufferResize() Function XML File Parsing DoS

Unknown or Incomplete

• Security Tracker: 1021239
• CVE ID: 2008-4225 (see also: NVD)
• Bugtraq ID: 32331
• Secunia Advisory ID: 32762 32764 32766 32773 32802 32807 32811 32974 33417 33462 33746 33792 34247 35379 35449 36173 36235 37555
• Related OSVDB ID: 49993
• VUPEN Advisory: ADV-2008-3176
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00002.html
  http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974
  http://wiki.rpath.com/Advisories:rPSA-2008-0325
  https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10
  https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9
  https://bugzilla.redhat.com/show_bug.cgi?id=470480
  https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-November/000781.html
  https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html
  https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html
• Other Advisory URL: http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473974
  http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1
  http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1
  http://sunsolve.sun.com/search/document.do?assetkey=1-66-266428-1
  http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm
  http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm
  http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0325
  http://www.debian.org/security/2008/dsa-1666
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:231
  http://www.ubuntu.com/usn/usn-673-1
  http://www.us.debian.org/security/2008/dsa-1666
  http://www.vmware.com/security/advisories/VMSA-2009-0001.html
• Vendor Specific Advisory URL: http://sunsolve.sun.com/search/document.do?assetkey=1-66-251406-1
  http://support.apple.com/kb/HT3613
  http://support.apple.com/kb/HT3639
  http://www.gentoo.org/security/en/glsa/glsa-200812-06.xml
• News Article: http://www.scmagazineus.com/New-Safari-40-fixes-more-than-50-vulnerabilities/article/138229/
• RedHat RHSA: RHSA-2008:0988

Unknown or Incomplete