CVEs-PoC/2008/CVE-2008-3529.md

CVE-2008-3529

Description

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

POC

Reference

• https://www.exploit-db.com/exploits/8798

Github

No PoCs found on GitHub currently.