Sun Solaris XML Library Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	13748
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 22 2003 12:00AM
Updated:	Apr 22 2003 12:00AM
Credit:	This issue was announced by Sun.
Vulnerable:	Sun SunOS 5.9 _x86 Sun SunOS 5.9 Sun Solaris 9_x86 Sun Solaris 9
Not Vulnerable:

Sun Solaris XML Library Unspecified Buffer Overflow Vulnerability

Sun Solaris XML library is affected by an unspecified buffer overflow vulnerability.

Specifically, the vulnerability presents itself when the library processes malformed process HTML attributes. A remote attacker may exploit this issue to arbitrary code on an affected computer in the context of an application using the library.

This issue could allow for unauthorized access.

Sun Solaris XML Library Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sun Solaris XML Library Unspecified Buffer Overflow Vulnerability

Solution:
Sun has released patches to address this issue.


Sun Solaris 9_x86

• Sun 114876-01
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=114876-01&method=h

Sun Solaris 9

• Sun 114875-01
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=114875-01&method=h

Sun SunOS 5.9

• Sun 114014-06
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=114014-06&method=f

Sun SunOS 5.9 _x86

• Sun 114015-06
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=114015-06&method=f

Sun Solaris XML Library Unspecified Buffer Overflow Vulnerability

References:

• 114014-10 - SunOS 5.9: libxml, libxslt and Freeware man pages Patch (Sun)
  
• 114875-01 - SunOS 5.9: XML library source patch (Sun)
  
• 114876-01 - SunOS 5.9_x86: XML library source patch (Sun)