CVE-2008-3281

TRUNG BÌNH 6.5CVE-2008-3281 · Công bố 27/08/2008 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2008-3281 là lỗ hổng mức TRUNG BÌNH (CVSS 6.5) ảnh hưởng safari (apple), libxml2 (xmlsoft).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 2.5%, cao hơn 84.7% các lỗ hổng khác.
Cách xử lý: cập nhật lên 4.0 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
safari apple	`< 4.0`	`4.0`
libxml2 xmlsoft	`≤ 2.6.32`	Chưa có bản vá

Mô tả

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.

Tham khảo

lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Mailing List
lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Broken Link
lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html · Mailing List
lists.vmware.com/pipermail/security-announce/2008/000039.html · Broken Link
mail.gnome.org/archives/xml/2008-August/msg00034.html · Mailing List
secunia.com/advisories/31558 · Broken Link
secunia.com/advisories/31566 · Broken Link
secunia.com/advisories/31590 · Broken Link
secunia.com/advisories/31728 · Broken Link
secunia.com/advisories/31748 · Broken Link
secunia.com/advisories/31855 · Broken Link
secunia.com/advisories/31982 · Broken Link
secunia.com/advisories/32488 · Broken Link
secunia.com/advisories/32807 · Broken Link
secunia.com/advisories/32974 · Broken Link
secunia.com/advisories/35379 · Broken Link
security.gentoo.org/glsa/glsa-200812-06.xml · Third Party Advisory
support.apple.com/kb/HT3613 · Third Party Advisory
support.apple.com/kb/HT3639 · Third Party Advisory
svn.gnome.org/viewvc/libxml2 · Broken Link
wiki.rpath.com/Advisories:rPSA-2008-0325 · Broken Link
debian.org/security/2008/dsa-1631 · Mailing List
mandriva.com/security/advisories · Broken Link
mandriva.com/security/advisories · Broken Link
securityfocus.com/archive/1/497962/100/0/threaded · Broken Link
securityfocus.com/bid/30783 · Broken Link
securitytracker.com/id · Broken Link
ubuntu.com/usn/usn-640-1 · Third Party Advisory
vmware.com/security/advisories/VMSA-2008-0017.html · Third Party Advisory
vupen.com/english/advisories/2008/2419 · Broken Link
vupen.com/english/advisories/2008/2843 · Broken Link
vupen.com/english/advisories/2008/2971 · Broken Link
vupen.com/english/advisories/2009/1522 · Broken Link
vupen.com/english/advisories/2009/1621 · Broken Link
xmlsoft.org/news.html · Release Notes
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812 · Broken Link
rhn.redhat.com/errata/RHSA-2008-0836.html · Third Party Advisory
usn.ubuntu.com/644-1 · Broken Link
redhat.com/archives/fedora-package-announce/2008-September/msg00261.html · Mailing List
redhat.com/archives/fedora-package-announce/2008-September/msg00347.html · Mailing List

Lỗ hổng khác của safari

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí