CVE-2008-4226

CRITICAL 10.0CVE-2008-4226 · Published 25/11/2008 · updated 16/06/2026

In short

CVE-2008-4226 is a CRITICAL (CVSS 10.0) vulnerability affecting libxml (xmlsoft).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libxml xmlsoft	`= 2.7.2`	No fix yet

Description

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
lists.apple.com/archives/security-announce/2009/jun/msg00002.html
lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
secunia.com/advisories/32762 · Vendor Advisory
secunia.com/advisories/32764 · Vendor Advisory
secunia.com/advisories/32766 · Vendor Advisory
secunia.com/advisories/32773 · Vendor Advisory
secunia.com/advisories/32802 · Vendor Advisory
secunia.com/advisories/32807 · Vendor Advisory
secunia.com/advisories/32811 · Vendor Advisory
secunia.com/advisories/32872
secunia.com/advisories/32974

More vulnerabilities in libxml

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free