A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the default case of DecodeTreeBlock a label is created via CurPath::AddLabel in order to track the label for later reference. An attacker can provide a malicious file to trigger this vulnerability.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAtt Xmill
APPAtt0.7
Powiązane podatności
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted inp...
A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xm...
A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT...
A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT...
A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressIt...