CVE-2004-0110

Common Vulnerabilities and Exposures

Upstream information

CVE-2004-0110 at MITRE

Description

Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.

NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

Novell Bugzilla entry: 64362, 64363

SUSE Security Advisories:

SUSE-SR:2005:001, published Wednesday, Jan 12th 2004 18:00 MEST

List of released packages

Product(s)	Fixed package version(s)	References
SuSE Linux Desktop 1.0	`libxml2 >= 2.4.23-244` `libxml2-devel >= 2.4.23-244`	ul1.x86-64 ul1.ia64 ul1.ppc slox4,2.x86 ul1.s390x ul1.s390 YOU Patch Nr: 9575
SUSE LINUX Retail Solution 8 SuSE Linux Enterprise Server 8 for AMD64 SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries SuSE Linux Enterprise Server 8 for IBM zSeries SuSE Linux Enterprise Server 8 for IPF SuSE Linux Openexchange Server 4 SuSE Linux School Server for i386 SuSE Linux Standard Server 8 UnitedLinux 1.0	`libxml2 >= 2.4.23-243` `libxml2-devel >= 2.4.23-243`	ul1.x86-64 ul1.ia64 ul1.ppc slox4,2.x86 ul1.s390x ul1.s390 YOU Patch Nr: 9575
SuSE Linux Desktop 1.0	`libxml2 >= 2.4.23-223`	ul1.s390 ul1.ia64 ul1.s390x slox4,2.x86 ul1.ppc ul1.x86-64 YOU Patch Nr: 8830
SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries	`libxml2 >= 2.4.23-117`	ul1.s390 ul1.ia64 ul1.s390x slox4,2.x86 ul1.ppc ul1.x86-64 YOU Patch Nr: 8830
SuSE Linux Enterprise Server 8 for IBM zSeries	`libxml2 >= 2.4.23-90`	ul1.s390 ul1.ia64 ul1.s390x slox4,2.x86 ul1.ppc ul1.x86-64 YOU Patch Nr: 8830
SuSE Linux Openexchange Server 4 SuSE Linux School Server for i386 SuSE Linux Standard Server 8 UnitedLinux 1.0	`libxml2 >= 2.4.23-224`	ul1.s390 ul1.ia64 ul1.s390x slox4,2.x86 ul1.ppc ul1.x86-64 YOU Patch Nr: 8830
SuSE Linux Enterprise Server 8 for IPF UnitedLinux 1.0	`libxml2 >= 2.4.23-123`	ul1.s390 ul1.ia64 ul1.s390x slox4,2.x86 ul1.ppc ul1.x86-64 YOU Patch Nr: 8830
SuSE Linux Enterprise Server 8 for AMD64 UnitedLinux 1.0	`libxml2 >= 2.4.23-192`	ul1.s390 ul1.ia64 ul1.s390x slox4,2.x86 ul1.ppc ul1.x86-64 YOU Patch Nr: 8830
SuSE Linux Desktop 1.0	`libxml2-devel >= 2.4.23-223`	slox4,2.x86 ul1.ia64 ul1.s390x ul1.s390 ul1.x86-64 YOU Patch Nr: 8835
SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries	`libxml2-devel >= 2.4.23-118`	slox4,2.x86 ul1.ia64 ul1.s390x ul1.s390 ul1.x86-64 YOU Patch Nr: 8835
SuSE Linux Enterprise Server 8 for IBM zSeries	`libxml2-devel >= 2.4.23-91`	slox4,2.x86 ul1.ia64 ul1.s390x ul1.s390 ul1.x86-64 YOU Patch Nr: 8835
SuSE Linux Openexchange Server 4 SuSE Linux School Server for i386 SuSE Linux Standard Server 8 UnitedLinux 1.0	`libxml2-devel >= 2.4.23-225`	slox4,2.x86 ul1.ia64 ul1.s390x ul1.s390 ul1.x86-64 YOU Patch Nr: 8835
SuSE Linux Enterprise Server 8 for IPF UnitedLinux 1.0	`libxml2-devel >= 2.4.23-124`	slox4,2.x86 ul1.ia64 ul1.s390x ul1.s390 ul1.x86-64 YOU Patch Nr: 8835
SuSE Linux Enterprise Server 8 for AMD64 UnitedLinux 1.0	`libxml2-devel >= 2.4.23-193`	slox4,2.x86 ul1.ia64 ul1.s390x ul1.s390 ul1.x86-64 YOU Patch Nr: 8835
Novell Linux Desktop 9 for x86	`libxml2 >= 2.6.7-28.7` `libxml2-devel >= 2.6.7-28.7`	suse91.s390x suse91.x86 suse91.ppc suse91.ia64 suse91.s390 suse91.x86-64 YOU Patch Nr: 9581
Novell Linux Desktop 9 for x86 SLES SDK 9 for IBM S/390 and IBM zSeries SLES SDK 9 for IBM iSeries and IBM pSeries SLES SDK 9 for IBM zSeries SLES SDK 9 for IPF SLES SDK 9 for X86-64 SLES SDK 9 for x86	`libxml2-python >= 2.6.7-46.7`	core9.x86 core9.ppc core9.s390 core9.s390x core9.ia64 core9.x86-64 YOU Patch Nr: 9576
SuSE Linux Enterprise Server 8 for AMD64 SuSE Linux Enterprise Server 8 for IBM iSeries and IBM pSeries SuSE Linux Enterprise Server 8 for IBM zSeries UnitedLinux 1.0	`libxml >= 1.8.17-371` `libxml-devel >= 1.8.17-371`	ul1.s390 suse91.ppc ul1.s390x suse91.s390 suse91.s390x ul1.ia64 suse91.x86-64 ul1.ppc suse91.ia64 ul1.x86-64 slox4,2.x86 suse91.x86 YOU Patch Nr: 9579
Novell Linux Desktop 9 for x86	`libxml >= 1.8.17-366.4` `libxml-devel >= 1.8.17-366.4`	ul1.s390 suse91.ppc ul1.s390x suse91.s390 suse91.s390x ul1.ia64 suse91.x86-64 ul1.ppc suse91.ia64 ul1.x86-64 slox4,2.x86 suse91.x86 YOU Patch Nr: 9579
SUSE LINUX Retail Solution 8 SuSE Linux Desktop 1.0 SuSE Linux Enterprise Server 8 for IPF SuSE Linux Openexchange Server 4 SuSE Linux School Server for i386 SuSE Linux Standard Server 8 UnitedLinux 1.0	`libxml >= 1.8.17-372` `libxml-devel >= 1.8.17-372`	ul1.s390 suse91.ppc ul1.s390x suse91.s390 suse91.s390x ul1.ia64 suse91.x86-64 ul1.ppc suse91.ia64 ul1.x86-64 slox4,2.x86 suse91.x86 YOU Patch Nr: 9579