CVEs-PoC/2008/CVE-2008-3529.md

CVE-2008-3529

Description

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

POC

Reference

• http://www.ubuntu.com/usn/USN-815-1
• https://www.exploit-db.com/exploits/8798

Github

• https://github.com/ARPSyndicate/cve-scores