body { transform: translateY(0) !important; }

Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2007-6284

Published: 12 January 2008

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.

Notes

Author	Note
jdstrand	private reproducer and patch on vendor-sec. DoS, but widely used

Priority

Status

Package	Release	Status
libxml2 Launchpad, Ubuntu, Debian	dapper	Released (2.6.24.dfsg-1ubuntu1.1)
	edgy	Released (2.6.26.dfsg-2ubuntu4.1)
	feisty	Released (2.6.27.dfsg-1ubuntu3.1)
	gutsy	Released (2.6.30.dfsg-2ubuntu1.1)
	upstream	Needs triage

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading