Remote Code Execution Vulnerability in libXML Versions 2.6.12 and 2.6.13

CVE-2004-0989

What is CVE-2004-0989?

Multiple buffer overflow vulnerabilities exist in libXML versions 2.6.12 and 2.6.13 that could allow remote attackers to execute arbitrary code. These vulnerabilities can be exploited through specially crafted FTP and proxy URLs that the xmlNanoFTPScanURL and xmlNanoFTPScanProxy functions do not handle properly. Other functions, including xmlNanoFTPConnect, xmlNanoHTTPConnectHost, and xmlNanoHTTPConnectHost, may also contribute to these overflows when DNS length values are manipulated. These issues could potentially lead to significant security breaches in applications relying on these libXML versions.

References