CVE-2013-2156

Related Files

Debian Security Advisory 2710-1

Posted Jun 18, 2013

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2710-1 - James Forshaw from Context Information Security discovered several vulnerabilities in xml-security-c, an implementation of the XML Digital Security specification.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2013-2153, CVE-2013-2154, CVE-2013-2155, CVE-2013-2156

SHA-256 | 9115a6092e44a563c15e997a4b11c3f9292f19c14422c4354bf87e64e409defa

Download | Favorite | View

Apache Santuario XML Security For C++ Heap Overflow

Posted Jun 18, 2013

Authored by James Forshaw

A heap overflow exists in the processing of the PrefixList attribute optionally used in conjunction with Exclusive Canonicalization, potentially allowing arbitrary code execution. If verification of the signature occurs prior to actual evaluation of a signing key, this could be exploited by an unauthenticated attacker. Apache Santuario XML Security for C++ library versions prior to 1.7.1 are affected.

tags | advisory, overflow, arbitrary, code execution

advisories | CVE-2013-2156

SHA-256 | 8d2ae10fa63742af710c4959f5b09bc760cf1e6de68ca6c11e5d303b15106ce4

Download | Favorite | View