The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Debian_linux | Debian | 3.1 (including) | 3.1 (including) |
| Debian_linux | Debian | 4.0 (including) | 4.0 (including) |
| Mandrake_linux | Mandrakesoft | 2007 (including) | 2007 (including) |
| Mandrake_linux | Mandrakesoft | 2007.1 (including) | 2007.1 (including) |
| Mandrake_linux | Mandrakesoft | 2008.0 (including) | 2008.0 (including) |
| Mandrake_linux_corporate_server | Mandrakesoft | 3.0 (including) | 3.0 (including) |
| Mandrake_linux_corporate_server | Mandrakesoft | 4.0 (including) | 4.0 (including) |
| Fedora | Redhat | 7 (including) | 7 (including) |
| Fedora | Redhat | 8 (including) | 8 (including) |
| Red Hat Enterprise Linux 2.1 | RedHat | libxml2-0:2.4.19-7.ent | * |
| Red Hat Enterprise Linux 3 | RedHat | libxml2-0:2.5.10-8 | * |
| Red Hat Enterprise Linux 4 | RedHat | libxml2-0:2.6.16-10.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | libxml2-0:2.6.26-2.1.2.1 | * |
| Libxml2 | Ubuntu | dapper | * |
| Libxml2 | Ubuntu | devel | * |
| Libxml2 | Ubuntu | edgy | * |
| Libxml2 | Ubuntu | feisty | * |
| Libxml2 | Ubuntu | gutsy | * |