CVE-2009-3560: Buffer Overflow
Expat is vulnerable to a denial of service, caused by the improper handling of XML data by the big2toUtf8 function within the libexpat library. A remote attacker could exploit this vulnerability using a specially-crafted XML document containing malformed UTF-8 sequences that trigger a buffer over-read to cause the application to crash.
Other sources
The big2toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1 allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
— Red Hat
The big2toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2009-3560?
CVE-2009-3560 has a severity rating that indicates it can lead to denial of service due to improper XML data handling.
How do I fix CVE-2009-3560?
To fix CVE-2009-3560, update to the latest version of the affected software, ensuring it is above the specified vulnerable versions.
Which software is affected by CVE-2009-3560?
CVE-2009-3560 affects older versions of the Expat library, specific versions of IBM DOORS, and certain versions of Apache HTTP Server.
Can CVE-2009-3560 be exploited remotely?
Yes, CVE-2009-3560 can be exploited remotely using specially crafted XML documents.
What types of attacks can CVE-2009-3560 facilitate?
CVE-2009-3560 can facilitate denial of service attacks by triggering buffer overflows through malformed UTF-8 sequences.