libxml2 Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	36010
Class:	Boundary Condition Error
CVE:	CVE-2009-2414 CVE-2009-2416
Remote:	Yes
Local:	No
Published:	Aug 10 2009 12:00AM
Updated:	Apr 13 2015 09:54PM
Credit:	Rauli Kaksonen, Tero Rontti and Jukka Taimisto
Vulnerable:	XMLSoft Libxml2 2.6.26 XMLSoft Libxml2 2.6.16 XMLSoft Libxml2 2.6.15 XMLSoft Libxml2 2.6.14 XMLSoft Libxml2 2.6.13 XMLSoft Libxml2 2.6.12 XMLSoft Libxml2 2.6.11 XMLSoft Libxml2 2.6.9 XMLSoft Libxml2 2.6.8 XMLSoft Libxml2 2.6.7 XMLSoft Libxml2 2.6.6 XMLSoft Libxml2 2.6.5 XMLSoft Libxml2 2.6.4 XMLSoft Libxml2 2.6.3 XMLSoft Libxml2 2.6.2 XMLSoft Libxml2 2.6.1 XMLSoft Libxml2 2.6 .0 XMLSoft Libxml2 2.5.10 XMLSoft Libxml2 2.5.8 XMLSoft Libxml2 2.5.4 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 XMLSoft Libxml2 2.5.1 XMLSoft Libxml2 2.4.23 XMLSoft Libxml2 2.4.19 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha XMLSoft Libxml2 2.4.12 XMLSoft Libxml 1.8.17 VMWare vMA 4.0 VMWare ESX Server 3.0.3 ESX303-200910401-BG VMWare ESX Server 3.0.3 ESX303-200905401-SG VMWare ESX Server 3.0.3 ESX303-200812406-BG VMWare ESX Server 3.0.3 VMWare ESX Server 3.0.2 ESX-1008420 VMWare ESX Server 3.0.2 VMWare ESX Server 3.0.1 VMWare ESX Server 3.0 VMWare ESX Server 2.5.5 patch 9 VMWare ESX Server 2.5.5 patch 8 VMWare ESX Server 2.5.5 patch 6 VMWare ESX Server 2.5.5 patch 4 VMWare ESX Server 2.5.5 patch 2 VMWare ESX Server 2.5.5 patch 15 VMWare ESX Server 2.5.5 patch 13 VMWare ESX Server 2.5.5 patch 12 VMWare ESX Server 2.5.5 patch 11 VMWare ESX Server 2.5.5 patch 10 VMWare ESX Server 2.5.5 VMWare ESX Server 4.0 ESX400-200912403 VMWare ESX Server 4.0 ESX400-200909401 VMWare ESX Server 4.0 VMWare ESX Server 3.5 ESX350-201003403 VMWare ESX Server 3.5 ESX350-200910401 VMWare ESX Server 3.5 ESX350-200906407 VMWare ESX Server 3.5 ESX350-200904401 VMWare ESX Server 3.5 VMWare ESX Server 2.5.5 patch 5 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 Sun StarSuite 9.0 Update 3 Sun StarSuite 8.0 Update 14 Sun StarOffice 9.0 Update 3 Sun StarOffice 8.0 Update 14 Sun Solaris 9_x86 Update 5 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Sun Solaris 7.0 Sun Solaris 9_x86 Update 2 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 9 Update 5 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_98 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_51 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_38 Sun OpenSolaris build snv_37 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_122 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris 0 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Novell Linux Desktop 9.0 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Redhat Desktop 3.0 Pardus Linux 2009 0 Pardus Linux 2008 0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Juniper CTPView 4.6 Juniper CTPView 4.5 Juniper CTPView 4.4 Juniper CTPView 4.3 Juniper CTPView 4.2 Google Chrome 2.0.172 .37 Google Chrome 2.0.172 .33 Google Chrome 2.0.172 .31 Google Chrome 2.0.172 .30 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Voice Portal 3.0 Avaya Proactive Contact 3.0.2 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0 Avaya Proactive Contact 3.0 Avaya Proactive Contact 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Interactive Response 4.0 Avaya Interactive Response 3.0 Avaya Communication Manager 5.1.2 Avaya Communication Manager 4.0.3 SP1 Avaya Communication Manager 3.1.4 SP2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 2.0.1 Avaya Communication Manager 2.0 Avaya Communication Manager 1.3.1 + Avaya Communication Manager Server DEFINITY Server R10 + Avaya Communication Manager Server DEFINITY Server R10 + Avaya Communication Manager Server DEFINITY Server R11 + Avaya Communication Manager Server DEFINITY Server R9 + Avaya Communication Manager Server DEFINITY Server R9 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 + Avaya Communication Manager Server S8700 Avaya Communication Manager 1.1 Avaya Communication Manager 5.2 Avaya Communication Manager 5.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 5.0 SP3 Avaya Communication Manager 5.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 Avaya Communication Manager 3.0 Avaya Communication Manager 2.2 Avaya Communication Manager 2.1 Avaya Aura SIP Enablement Services 3.1.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 3.1 Avaya Aura SIP Enablement Services 3.0 Avaya Aura Application Enablement Services 3.1 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.3 Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.2 Apple Safari 3.1.1 for Windows Apple Safari 3.1.1 Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Apple Safari 3.2 Apple Safari 3.1 for Windows Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.6 Apple Mac OS X 10.5 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0
Not Vulnerable:	VMWare vMA 4.0 Patch 2 Sun OpenSolaris build snv_123 Juniper CTPView 7.0R1 Google Chrome 2.0.172 .43 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Mac OS X Server 10.6.2 Apple Mac OS X 10.6.2 Apple iOS 4

libxml2 Multiple Memory Corruption Vulnerabilities

The 'libxml2' library is prone to multiple memory-corruption vulnerabilities.

An attacker can exploit these issues by tricking a victim into opening a specially crafted XML file.

A successful attack can allow attacker-supplied code to run in the context of the application using the vulnerable library or can cause a denial-of-service condition.

libxml2 Multiple Memory Corruption Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libxml2 Multiple Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references for details.


Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libxml2-dbg_2.6.32.dfsg-4ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.32.dfsg -4ubuntu1.2_powerpc.deb


• Ubuntu libxml2-dev_2.6.32.dfsg-4ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dev_2.6.32.dfsg -4ubuntu1.2_powerpc.deb


• Ubuntu libxml2-doc_2.6.32.dfsg-4ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.32.dfsg-4ubuntu1.2_all.deb


• Ubuntu libxml2-udeb_2.6.32.dfsg-4ubuntu1.2_powerpc.udeb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-udeb_2.6.32.dfs g-4ubuntu1.2_powerpc.udeb


• Ubuntu libxml2-utils_2.6.32.dfsg-4ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-utils_2.6.32.df sg-4ubuntu1.2_powerpc.deb


• Ubuntu libxml2_2.6.32.dfsg-4ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2_2.6.32.dfsg-4ub untu1.2_powerpc.deb


• Ubuntu python-libxml2-dbg_2.6.32.dfsg-4ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 32.dfsg-4ubuntu1.2_powerpc.deb


• Ubuntu python-libxml2_2.6.32.dfsg-4ubuntu1.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2_2.6.32.d fsg-4ubuntu1.2_powerpc.deb

Debian Linux 5.0 alpha

• Debian libxml2-dbg_2.6.32.dfsg-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.32.dfsg-5+lenny1_alpha.deb


• Debian libxml2-dev_2.6.32.dfsg-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.32.dfsg-5+lenny1_alpha.deb


• Debian libxml2-doc_2.6.32.dfsg-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.32.dfsg-5+lenny1_all.deb


• Debian libxml2-utils_2.6.32.dfsg-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.32.dfsg-5+lenny1_alpha.deb


• Debian libxml2_2.6.32.dfsg-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 32.dfsg-5+lenny1_alpha.deb


• Debian python-libxml2_2.6.32.dfsg-5+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/python-libxm l2_2.6.32.dfsg-5+lenny1_alpha.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libxml2-dbg_2.6.32.dfsg-5ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.32.dfsg -5ubuntu4.2_sparc.deb


• Ubuntu libxml2-dev_2.6.32.dfsg-5ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dev_2.6.32.dfsg -5ubuntu4.2_sparc.deb


• Ubuntu libxml2-doc_2.6.32.dfsg-5ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.32.dfsg-5ubuntu4.2_all.deb


• Ubuntu libxml2-udeb_2.6.32.dfsg-5ubuntu4.2_sparc.udeb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-udeb_2.6.32.dfs g-5ubuntu4.2_sparc.udeb


• Ubuntu libxml2-utils_2.6.32.dfsg-5ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-utils_2.6.32.df sg-5ubuntu4.2_sparc.deb


• Ubuntu libxml2_2.6.32.dfsg-5ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2_2.6.32.dfsg-5ub untu4.2_sparc.deb


• Ubuntu python-libxml2-dbg_2.6.32.dfsg-5ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 32.dfsg-5ubuntu4.2_sparc.deb


• Ubuntu python-libxml2_2.6.32.dfsg-5ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2_2.6.32.d fsg-5ubuntu4.2_sparc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libxml2-dbg_2.6.32.dfsg-4ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.32.dfsg -4ubuntu1.2_sparc.deb


• Ubuntu libxml2-dev_2.6.32.dfsg-4ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dev_2.6.32.dfsg -4ubuntu1.2_sparc.deb


• Ubuntu libxml2-doc_2.6.32.dfsg-4ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.32.dfsg-4ubuntu1.2_all.deb


• Ubuntu libxml2-udeb_2.6.32.dfsg-4ubuntu1.2_sparc.udeb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-udeb_2.6.32.dfs g-4ubuntu1.2_sparc.udeb


• Ubuntu libxml2-utils_2.6.32.dfsg-4ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-utils_2.6.32.df sg-4ubuntu1.2_sparc.deb


• Ubuntu libxml2_2.6.32.dfsg-4ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2_2.6.32.dfsg-4ub untu1.2_sparc.deb


• Ubuntu python-libxml2-dbg_2.6.32.dfsg-4ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 32.dfsg-4ubuntu1.2_sparc.deb


• Ubuntu python-libxml2_2.6.32.dfsg-4ubuntu1.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2_2.6.32.d fsg-4ubuntu1.2_sparc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu libxml2-dbg_2.6.32.dfsg-5ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.32.dfsg -5ubuntu4.2_lpia.deb


• Ubuntu libxml2-dev_2.6.32.dfsg-5ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dev_2.6.32.dfsg -5ubuntu4.2_lpia.deb


• Ubuntu libxml2-doc_2.6.32.dfsg-5ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.32.dfsg-5ubuntu4.2_all.deb


• Ubuntu libxml2-udeb_2.6.32.dfsg-5ubuntu4.2_lpia.udeb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-udeb_2.6.32.dfs g-5ubuntu4.2_lpia.udeb


• Ubuntu libxml2-utils_2.6.32.dfsg-5ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-utils_2.6.32.df sg-5ubuntu4.2_lpia.deb


• Ubuntu libxml2_2.6.32.dfsg-5ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2_2.6.32.dfsg-5ub untu4.2_lpia.deb


• Ubuntu python-libxml2-dbg_2.6.32.dfsg-5ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 32.dfsg-5ubuntu4.2_lpia.deb


• Ubuntu python-libxml2_2.6.32.dfsg-5ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2_2.6.32.d fsg-5ubuntu4.2_lpia.deb

Debian Linux 5.0 armel

• Debian libxml2-dbg_2.6.32.dfsg-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.32.dfsg-5+lenny1_armel.deb


• Debian libxml2-dev_2.6.32.dfsg-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.32.dfsg-5+lenny1_armel.deb


• Debian libxml2-doc_2.6.32.dfsg-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.32.dfsg-5+lenny1_all.deb


• Debian libxml2-utils_2.6.32.dfsg-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.32.dfsg-5+lenny1_armel.deb


• Debian libxml2_2.6.32.dfsg-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 32.dfsg-5+lenny1_armel.deb


• Debian python-libxml2_2.6.32.dfsg-5+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/python-libxm l2_2.6.32.dfsg-5+lenny1_armel.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64xml1-1.8.17-14.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xml1-devel-1.8.17-14.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xml2-devel-2.7.1-1.4mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xml2_2-2.7.1-1.4mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-python-2.7.1-1.4mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-utils-2.7.1-1.4mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 mips

• Debian libxml-dev_1.8.17-14+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml/libxml-dev_1. 8.17-14+etch1_mips.deb


• Debian libxml1_1.8.17-14+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml/libxml1_1.8.1 7-14+etch1_mips.deb


• Debian libxml2-dbg_2.6.27.dfsg-6+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.27.dfsg-6+etch1_mips.deb


• Debian libxml2-dev_2.6.27.dfsg-6+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.27.dfsg-6+etch1_mips.deb


• Debian libxml2-doc_2.6.27.dfsg-6+etch1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-6+etch1_all.deb


• Debian libxml2-utils_2.6.27.dfsg-6+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.27.dfsg-6+etch1_mips.deb


• Debian libxml2_2.6.27.dfsg-6+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 27.dfsg-6+etch1_mips.deb


• Debian python-libxml2_2.6.27.dfsg-6+etch1_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/python-libxm l2_2.6.27.dfsg-6+etch1_mips.deb

Debian Linux 4.0 arm

• Debian libxml-dev_1.8.17-14+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml/libxml-dev_1. 8.17-14+etch1_arm.deb


• Debian libxml1_1.8.17-14+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml/libxml1_1.8.1 7-14+etch1_arm.deb


• Debian libxml2-dbg_2.6.27.dfsg-6+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.27.dfsg-6+etch1_arm.deb


• Debian libxml2-dev_2.6.27.dfsg-6+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.27.dfsg-6+etch1_arm.deb


• Debian libxml2-doc_2.6.27.dfsg-6+etch1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-6+etch1_all.deb


• Debian libxml2-utils_2.6.27.dfsg-6+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.27.dfsg-6+etch1_arm.deb


• Debian libxml2_2.6.27.dfsg-6+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 27.dfsg-6+etch1_arm.deb


• Debian python-libxml2_2.6.27.dfsg-6+etch1_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/python-libxm l2_2.6.27.dfsg-6+etch1_arm.deb

Debian Linux 4.0 m68k

• Debian libxml2-doc_2.6.27.dfsg-6+etch1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-6+etch1_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva libxml1-1.8.17-14.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml1-devel-1.8.17-14.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-devel-2.7.1-1.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-python-2.7.1-1.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-utils-2.7.1-1.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2_2-2.7.1-1.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 hppa

• Debian libxml2-dbg_2.6.32.dfsg-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.32.dfsg-5+lenny1_hppa.deb


• Debian libxml2-dev_2.6.32.dfsg-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.32.dfsg-5+lenny1_hppa.deb


• Debian libxml2-doc_2.6.32.dfsg-5+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.32.dfsg-5+lenny1_all.deb


• Debian libxml2-utils_2.6.32.dfsg-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.32.dfsg-5+lenny1_hppa.deb


• Debian libxml2_2.6.32.dfsg-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 32.dfsg-5+lenny1_hppa.deb


• Debian python-libxml2_2.6.32.dfsg-5+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/python-libxm l2_2.6.32.dfsg-5+lenny1_hppa.deb

MandrakeSoft Corporate Server 3.0

• Mandriva libxml1-1.8.17-6.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml1-devel-1.8.17-6.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-2.6.6-1.7.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-devel-2.6.6-1.7.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-python-2.6.6-1.7.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxml2-utils-2.6.6-1.7.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

Apple Safari 4.0.3 for Windows

• Apple APPLE-SA-2009-11-11-1 SafariQuickTimeSetup.exe
  Safari+QuickTime for Windows 7, Vista or XP
  http://www.apple.com/safari/download/


• Apple APPLE-SA-2009-11-11-1 SafariSetup.exe
  Safari for Windows 7, Vista or XP
  http://www.apple.com/safari/download/

libxml2 Multiple Memory Corruption Vulnerabilities

References:

• ASA-2009-384 (Avaya)
  
• Bug 515195 CVE-2009-2414 libxml, libxml2, mingw32-libxml2: Stack overflow by par (Jan Lieskovsky)
  
• Bug 515205 CVE-2009-2416 libxml, libxml2, mingw32-libxml2: Pointer use-after-fre (Jan Lieskovsky)
  
• Bug#540865: libxml2: CVE-2009-2414, CVE-2009-2416 pointer-user-after-free and st (Nico Golde)
  
• libxml2 Homepage (xmlsoft)
  
• Stable Update: Security fixes (Google)
  
• VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release addre (VMware Security Team )
  
• #266688: Security Vulnerabilities in libxml2 Library Related to Parsing of Eleme (Sun)
  
• 2014-11 Security Bulletin: CTPView: Multiple Security vulnerabilities resolved b (Juniper)
  
• 266088 StarOffice/StarSuite 8 and 9 (Sun)
  
• ASA-2009-440 Security Vulnerabilities in StarOffice/StarSuite 8 and 9 Related to (Avaya)