Heap Buffer Overflow in XML::Parser Affects Perl Applications

CVE-2006-10003

What is CVE-2006-10003?

A heap buffer overflow vulnerability in XML::Parser versions up to 2.47 for Perl can occur when parsing XML files with deeply nested elements. This flaw happens due to an off-by-one error in the st_serial_stack function, where the stack pointer is incorrectly advanced without sufficient buffer space being allocated, potentially leading to unauthorized access or application crashes.

References