Vulnerability CVE-2008-3529 - CERT Civis.Net

Vulnerability Name:

CVE-2008-3529 (CCN-45085)

Assigned:

2008-09-11

Published:

2008-09-11

Updated:

2023-02-13

Summary:

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.8 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2008-3529

Source: secalert@redhat.com
Type: Broken Link, Mailing List
secalert@redhat.com

Source: secalert@redhat.com
Type: Mailing List, Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Mailing List, Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Mailing List, Third Party Advisory
secalert@redhat.com

Source: CCN
Type: RHSA-2008-0884
Important: libxml2 security update

Source: CCN
Type: RHSA-2008-0886
Important: libxml2 security update

Source: CCN
Type: SA31558
Libxml2 Recursion Limit Denial of Service Vulnerability

Source: CCN
Type: SA32265
Avaya Products libxml2 XML Entity Name Buffer Overflow Vulnerability

Source: CCN
Type: SA33715
Avaya CMS Solaris "libxml2" XML Processing Vulnerability

Source: CCN
Type: SA33722
Sun Solaris "libxml2" XML Processing Vulnerability

Source: CCN
Type: SA35056
Apple Safari Multiple Vulnerabilities

Source: CCN
Type: SA35074
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: CCN
Type: SA35379
Apple Safari Multiple Vulnerabilities

Source: CCN
Type: SA36173
Sun Java System Access Manager XML Processing Vulnerabilities

Source: CCN
Type: SA36235
Sun Java System Access Manager Policy Agent XML Processing Vulnerabilities

Source: CCN
Type: SA37555
Sun Management Center XML Library Multiple Vulnerabilities

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: SECTRACK ID: 1020855
Libxml2 Heap Overflow in xmlParseAttValueComplex() Lets Remote Users Execute Arbitrary Code

Source: secalert@redhat.com
Type: Third Party Advisory, VDB Entry
secalert@redhat.com

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: CCN
Type: Sun Alert ID: 247346
A Security Vulnerability in the libxml2 Library May Lead to Denial of Service (DoS)

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: CCN
Type: Sun Alert ID: 266428
Multiple Security Vulnerabilities in the XML Library (see libxml2(3)) Bundled With Sun Management Center (SunMC) May Result in Arbitrary Code Execution or a Denial of Service (DoS)

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: Apple Web site
About the security content of Safari 3.2.3

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: ASA-2008-400
libxml2 security update (RHSA-2008-0884)

Source: CCN
Type: ASA-2008-420
libxml2 security update (RHSA-2008-0886)

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: NORTEL BULLETIN ID: 2009009314, Rev 1
Nortel Response to Sun Alert 247346 - Solaris libxml2 Library Vulnerability May Lead to Denial of Service (DoS)

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: DEBIAN
Type: DSA-1654
libxml2 -- buffer overflow

Source: CCN
Type: GLSA-200812-06
libxml2: Multiple vulnerabilities

Source: secalert@redhat.com
Type: Broken Link
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: BID-31126
libxml XML Entity Name Heap Buffer Overflow Vulnerability

Source: secalert@redhat.com
Type: Third Party Advisory, VDB Entry
secalert@redhat.com

Source: CCN
Type: USN-644-1
libxml2 vulnerabilities

Source: CCN
Type: USN-815-1
libxml2 vulnerabilities

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory, US Government Resource
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: XMLsoft Web site
Libxml2

Source: secalert@redhat.com
Type: Release Notes, Vendor Advisory
secalert@redhat.com

Source: CCN
Type: Red Hat Bugzilla Bug 461015
CVE-2008-3529 libxml2: long entity name heap buffer overflow

Source: secalert@redhat.com
Type: Issue Tracking, Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory, VDB Entry
secalert@redhat.com

Source: XF
Type: UNKNOWN
libxml2-entitynames-bo(45085)

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Exploit, Third Party Advisory, VDB Entry
secalert@redhat.com

Source: SUSE
Type: SUSE-SR:2008:018
SUSE Security Summary Report

Vulnerable Configuration:

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

Configuration RedHat 6:

cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Configuration RedHat 7:

cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

Configuration RedHat 8:

cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

Configuration RedHat 9:

cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

Configuration CCN 1:

cpe:/o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*

AND

cpe:/o:sun:solaris:7.0:*:sparc:*:*:*:*:*

OR cpe:/o:microsoft:windows:xp:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:sun:solaris:8:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9:*:x86:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:6.06:*:lts:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*

OR cpe:/o:microsoft:windows_vista:*:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:x86-64:*:*:*:*:*

OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:7.04:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:7.10:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:x86_64:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2007.1:*:x86-64:*:*:*:*:*

OR cpe:/a:sun:management_center:3.6.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu:8.04:*:lts:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_89:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_89:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_95::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_01:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_02:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_13:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_19:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_22:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_39:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_47:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_64:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88:*:x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_01:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_02:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_13:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_19:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_22:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_39:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_47:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_64:*:sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_88:*:sparc:*:*:*:*:*

OR cpe:/a:sun:management_center:4.0:*:*:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_03::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_04::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_05::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_06::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_07::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_08::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_09::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_10::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_11::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_12::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_14::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_15::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_16::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_18::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_20::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_21::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_24::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_25::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_26::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_27::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_28::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_29::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_31::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_32::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_33::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_34::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_35::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_37::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_41::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_43::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_44::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_45::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_48::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_50::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_53::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_54::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_56::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_58::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_59::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_60::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_62::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_65::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_68::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_69::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_72::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_75::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_76::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_78::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_81::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_82::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_84::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_85::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_87::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_86::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_17::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_23::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_30::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_36::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_38::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_42::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_46::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_49::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_51::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_52::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_55::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_57::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_61::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_63::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_66::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_67::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_70::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_71::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_73::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_74::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_77::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_79::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_83::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_03::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_04::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_05::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_06::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_07::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_15::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_08::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_14::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_11::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_17::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_12::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_09::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_16::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_10::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_21::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_20::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_27::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_26::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_25::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_24::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_23::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_18::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_28::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_33::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_34::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_35::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_36::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_32::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_37::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_31::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_30::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_29::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_40::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_41::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_42::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_43::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_44::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_38::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_45::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_46::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_48::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_55::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_54::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_50::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_57::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_49::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_56::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_52::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_51::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_53::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_67::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_66::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_59::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_65::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_58::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_61::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_63::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_60::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_62::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_71::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_68::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_72::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_77::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_70::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_74::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_73::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_76::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_69::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_75::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_78::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_84::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_83::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_79::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_86::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_85::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_87::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_80::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_82::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_81::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_100::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_80::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_91::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_90::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_40::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_92::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::sparc:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_94::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_93::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_99::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_97::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_98::x86:*:*:*:*:*

OR cpe:/o:sun:opensolaris:build_snv_96::x86:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20083529	V	CVE-2008-3529	2015-11-16
oval:org.mitre.oval:def:29030	P	RHSA-2008:0884 -- libxml2 security update (Important)	2015-08-17
oval:org.mitre.oval:def:13882	P	USN-815-1 -- libxml2 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:17731	P	USN-644-1 -- libxml2 vulnerabilities	2014-06-30
oval:org.mitre.oval:def:18505	P	DSA-1654-1 libxml2 - execution of arbitrary code	2014-06-23
oval:org.mitre.oval:def:8076	P	DSA-1654 libxml2 -- buffer overflow	2014-06-23
oval:org.mitre.oval:def:21739	P	ELSA-2008:0884: libxml2 security update (Important)	2014-05-26
oval:org.mitre.oval:def:11760	V	Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.	2013-04-29
oval:org.mitre.oval:def:6103	V	Libxml2 Heap Overflow in xmlParseAttValueComplex() Lets Remote Users Execute Arbitrary Code	2010-05-17
oval:org.debian:def:1654	V	buffer overflow	2008-10-14
oval:com.redhat.rhsa:def:20080884	P	RHSA-2008:0884: libxml2 security update (Important)	2008-09-11