CVEvulnerability

CVE-2004-0110

7.5 HIGH Published 2004-03-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-03-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.

Affected configurations

• sgi propack 2.3 • sgi propack 2.4 • xmlsoft libxml 1.8.17 • xmlsoft libxml2 2.4.19 • xmlsoft libxml2 2.4.23 • xmlsoft libxml2 2.5.4 • xmlsoft libxml2 2.5.10 • xmlsoft libxml2 2.5.11 • xmlsoft libxml2 2.6.0 • xmlsoft libxml2 2.6.1 • xmlsoft libxml2 2.6.2 • xmlsoft libxml2 2.6.3 • xmlsoft libxml2 2.6.4 • xmlsoft libxml2 2.6.5

References