CVE-2004-0989
libXML 2.6.12-2.6.13 - Buffer Overflow
Title source: llmDescription
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
Exploits (1)
References (22)
... and 2 more
Scores
EPSS
0.2427
EPSS Percentile
96.1%
Details
Status
published
Products (15)
redhat/fedora_core
core_2.0
trustix/secure_linux
2.0
trustix/secure_linux
2.1
ubuntu/ubuntu_linux
4.1 (2 CPE variants)
xmlsoft/libxml
1.8.17
xmlsoft/libxml2
2.5.11
xmlsoft/libxml2
2.6.6
xmlsoft/libxml2
2.6.7
xmlsoft/libxml2
2.6.8
xmlsoft/libxml2
2.6.9
... and 5 more
Published
Mar 01, 2005
Tracked Since
Feb 18, 2026