CVE-2011-1944: Buffer Overflow
An integer overflow, leading to heap-based buffer overflow was found in the way libxml, XML files manipulation library, processed certain XPath expressions. A remote attacker could provide a specially-crafted XML file, which once opened in an application linked against libxml would cause that application to crash, or, potentially, execute arbitrary code with the privileges of the user running the application.
References: [1] http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-and-interesting.html [2] http://www.openwall.com/lists/oss-security/2011/05/31/5 [3] http://www.openwall.com/lists/oss-security/2011/05/31/8
Upstream patch: [4] http://git.gnome.org/browse/libxml2/commit/?id=d7958b21e7f8c447a26bb2436f08402b2c308be4
Other sources
Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1944?
CVE-2011-1944 is considered a high severity vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2011-1944?
To fix CVE-2011-1944, update libxml2 to version 2.8.0 or later.
What types of systems are affected by CVE-2011-1944?
CVE-2011-1944 affects systems using libxml2 versions older than 2.8.0, including various distributions like Red Hat and Gnome.
What causes CVE-2011-1944?
CVE-2011-1944 is caused by an integer overflow leading to a heap-based buffer overflow while processing specific XPath expressions in XML files.
Can CVE-2011-1944 be exploited remotely?
Yes, an attacker can exploit CVE-2011-1944 remotely by providing a specially-crafted XML file that triggers the vulnerability.