Oval Definition:oval:com.ubuntu.xenial:def:200935600000000
Revision Date:2009-12-04Version:1
Title:CVE-2009-3560 on Ubuntu 16.04 LTS (xenial) - medium.
Description:The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2009-3560
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • ayttm package in xenial, is related to the CVE in some way and has been fixed (note: '0.6.1-2').
  • OR cableswig package in xenial is affected and may need fixing.
  • OR coin3 package in xenial is affected and needs fixing.
  • OR expat package in xenial was vulnerable but has been fixed (note: '2.0.1-7ubuntu1').
  • OR matanza package in xenial is affected and may need fixing.
  • OR paraview package in xenial, is related to the CVE in some way and has been fixed (note: '3.8.1-1ubuntu1').
  • OR swish-e package in xenial is affected and may need fixing.
  • OR xmlrpc-c package in xenial was vulnerable but has been fixed (note: '1.06.27-1ubuntu7').
    • BACK