XMLStarlet Command Line XML Toolkit Multiple Unspecified Buffer Overflow Vulnerabilities

Bugtraq ID:	11270
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 28 2004 12:00AM
Updated:	Sep 28 2004 12:00AM
Credit:	The individual responsible for the discovery of this issue is currently unknown; the vendor disclosed this issue.
Vulnerable:	XMLStarlet Command Line XML Toolkit 0.9.3
Not Vulnerable:	XMLStarlet Command Line XML Toolkit 0.9.5

XMLStarlet Command Line XML Toolkit Multiple Unspecified Buffer Overflow Vulnerabilities

XMLStarlet command line XML toolkit is affected by multiple unspecified buffer overflow vulnerabilities. These issues are caused by a failure of the application to validate the lengths of user-supplied strings prior to copying them into finite process buffers.

An attacker may leverage this issue to manipulate process memory, potentially facilitating arbitrary code execution.

XMLStarlet Command Line XML Toolkit Multiple Unspecified Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

XMLStarlet Command Line XML Toolkit Multiple Unspecified Buffer Overflow Vulnerabilities

Solution:
The vendor has released an upgrade dealing with this issue.


XMLStarlet Command Line XML Toolkit 0.9.3

• XMLStarlet XMLStarlet 0.9.5
  http://xmlstar.sourceforge.net/download.php

XMLStarlet Command Line XML Toolkit Multiple Unspecified Buffer Overflow Vulnerabilities

References:

• XMLStarlet 0.9.5 Change Log (XMLStarlet)
  
• XMLStarlet Command Line XML Toolkit Home Page (XMLStarlet)