libxml2 'XMLWriter::writeAttribute()' Memory Leak Information Disclosure Vulnerability

Bugtraq ID:	45973
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 24 2011 12:00AM
Updated:	Jan 24 2011 12:00AM
Credit:	Kees Cook
Vulnerable:	XMLSoft Libxml2 2.6.32 XMLSoft Libxml2 2.6.31 XMLSoft Libxml2 2.6.30 XMLSoft Libxml2 2.6.26 XMLSoft Libxml2 2.6.22 XMLSoft Libxml2 2.6.20 XMLSoft Libxml2 2.6.27
Not Vulnerable:

libxml2 'XMLWriter::writeAttribute()' Memory Leak Information Disclosure Vulnerability

The 'libxml2' library is prone to a local information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

libxml2 'XMLWriter::writeAttribute()' Memory Leak Information Disclosure Vulnerability

The following example is available:

• /data/vulnerabilities/exploits/45973.php

libxml2 'XMLWriter::writeAttribute()' Memory Leak Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libxml2 'XMLWriter::writeAttribute()' Memory Leak Information Disclosure Vulnerability

References:

• CVE request: libxml2 heap contents leak (Kees Cook)
  
• libxml2 Homepage (xmlsoft)