Many security problems have been fixed in libxml2, a popular library to handle XML data files.

  - CVE-2011-3919 :
    Juri Aedla discovered a heap-based buffer overflow that     allows remote attackers to cause a denial of service or     possibly have unspecified other impact via unknown     vectors.

  - CVE-2011-0216 :
    An Off-by-one error have been discovered that allows     remote attackers to execute arbitrary code or cause a     denial of service.

  - CVE-2011-2821 :
    A memory corruption (double free) bug has been     identified in libxml2's XPath engine. Through it, it is     possible for an attacker to cause a denial of service or     possibly have unspecified other impact. This     vulnerability does not affect the oldstable distribution     (lenny).

  - CVE-2011-2834 :
    Yang Dingning discovered a double free vulnerability     related to XPath handling.

  - CVE-2011-3905 :
    An out-of-bounds read vulnerability had been discovered,     which allows remote attackers to cause a denial of     service.

lot of security bug fixes Lots of security patches

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the remote Apple TV 2nd generation or later device has a version of iOS that is prior to 5.1. It is, therefore, reportedly affected by several vulnerabilities :

  - An uninitialized memory access issue in the handling of     Sorenson encoded movie files could lead to arbitrary     code execution. (CVE-2012-3722)

  - Following the DNAv4 protocol, the device may broadcast     MAC addresses of previously accessed networks when     connecting to a Wi-Fi network. (CVE-2012-3725)

  - A buffer overflow in libtiff's handling of ThunderScan     encoded TIFF images could lead to arbitrary code     execution. (CVE-2011-1167)

  - Multiple memory corruption issues in libpng's handling     of PNG images could lead to arbitrary code execution.
    (CVE-2011-3026 / CVE-2011-3048 / CVE-2011-3328)

  - A double free issue in ImageIO's handling of JPEG     images could lead to arbitrary code execution.
    (CVE-2012-3726)

  - An integer overflow issue in libTIFF's handling of TIFF     images could lead to arbitrary code execution.
    (CVE-2012-1173)

  - A stack-based buffer overflow in the handling of ICU     locale IDs could lead to arbitrary code execution.
    (CVE-2011-4599)

  - Multiple vulnerabilities in libxml could have a variety     of impacts, including arbitrary code execution.
    (CVE-2011-1944 / CVE-2011-2821 / CVE-2011-2834 /     CVE-2011-3919)

  - Multiple memory corruption issues in JavaScriptCore     could lead to arbitrary code execution.
    (CVE-2012-0682 / CVE-2012-0683 / CVE-2012-3589 /     CVE-2012-3590 / CVE-2012-3591 / CVE-2012-3592 /     CVE-2012-3678 / CVE-2012-3679)

Updated mingw32-libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 6. This advisory also contains information about future updates for the mingw32 packages, as well as the deprecation of the packages with the release of Red Hat Enterprise Linux 6.4.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

These packages provide the libxml2 library, a development toolbox providing the implementation of various XML standards, for users of MinGW (Minimalist GNU for Windows).

IMPORTANT NOTE: The mingw32 packages in Red Hat Enterprise Linux 6 will no longer be updated proactively and will be deprecated with the release of Red Hat Enterprise Linux 6.4. These packages were provided to support other capabilities in Red Hat Enterprise Linux and were not intended for direct customer use. Customers are advised to not use these packages with immediate effect. Future updates to these packages will be at Red Hat's discretion and these packages may be removed in a future minor release.

A heap-based buffer overflow flaw was found in the way libxml2 decoded entity references with long names. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3919)

A heap-based buffer underflow flaw was found in the way libxml2 decoded certain entities. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2012-5134)

It was found that the hashing routine used by libxml2 arrays was susceptible to predictable hash collisions. Sending a specially crafted message to an XML service could result in longer processing time, which could lead to a denial of service. To mitigate this issue, randomization has been added to the hashing function to reduce the chance of an attacker successfully causing intentional collisions.
(CVE-2012-0841)

Multiple flaws were found in the way libxml2 parsed certain XPath (XML Path Language) expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash. (CVE-2010-4008, CVE-2010-4494, CVE-2011-2821, CVE-2011-2834)

Two heap-based buffer overflow flaws were found in the way libxml2 decoded certain XML files. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-0216, CVE-2011-3102)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XPath expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash or, possibly, execute arbitrary code.
(CVE-2011-1944)

An out-of-bounds memory read flaw was found in libxml2. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash. (CVE-2011-3905)

Red Hat would like to thank the Google Security Team for reporting the CVE-2010-4008 issue. Upstream acknowledges Bui Quang Minh from Bkis as the original reporter of CVE-2010-4008.

All users of mingw32-libxml2 are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
57702	Debian DSA-2394-1 : libxml2 - several vulnerabilities	Nessus	Debian Local Security Checks	2012/1/27	2021/1/11	high
62324	Fedora 16 : libxml2-2.7.8-8.fc16 (2012-13824)	Nessus	Fedora Local Security Checks	2012/9/27	2021/1/11	high
62357	Apple TV < 5.1 Multiple Vulnerabilities	Nessus	Gain a shell remotely	2012/9/27	2018/11/15	high
64384	CentOS 6 : mingw32-libxml2 (CESA-2013:0217)	Nessus	CentOS Local Security Checks	2013/2/1	2021/1/4	high

偵測

搜尋 Plugin

high

high

high

high