SB2011021103 - Slackware Linux update for expat

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Infinite loop (CVE-ID: CVE-2009-2625)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop. A remote attacker can send a malformed XML input to the application, consume all available system resources and cause denial of service conditions.

2) Out-of-bounds read (CVE-ID: CVE-2009-3560)

The vulnerability allows a remote attacker to perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when processing an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720 within the The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used. A remote attacker can create a specially crafted file, pass it to the application, trigger out-of-bounds read error and crash the affected application.

3) Out-of-bounds read (CVE-ID: CVE-2009-3720)

The vulnerability allows a remote attacker to perform denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when processing an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625 within the The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used. A remote attacker can create a specially crafted file, pass it to the application, trigger out-of-bounds read error and crash the affected application.

Remediation

Install update from vendor's website.

References

• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026