CVE-2009-3720— Expat 安全漏洞
一分钟漏洞结论
影响对象
n/a n/a
利用判断
利用概率较高，应尽快评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Expat是一款使用C语言编写的快速流式XML解析器。 Expat 2.0.1版本的libexpat模块中存在安全漏洞。当Expat在 Python,、PyXML、 w3c-libwww和其他软件中运行时，攻击者可以将包含UTF-8字符序列的特制XML文档作为libexpat模块中lib/xmltok_impl.c的updatePosition函数参数以触发buffer over-read，造成拒绝服务(应用程序崩溃)。
可能的 ATT&CK 技术 1 AI
T1190 · Exploit Public-Facing Application
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2009-3720 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Expat 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Expat是一款使用C语言编写的快速流式XML解析器。 Expat 2.0.1版本的libexpat模块中存在安全漏洞。当Expat在 Python,、PyXML、 w3c-libwww和其他软件中运行时，攻击者可以将包含UTF-8字符序列的特制XML文档作为libexpat模块中lib/xmltok_impl.c的updatePosition函数参数以触发buffer over-read，造成拒绝服务(应用程序崩溃)。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
二、漏洞 CVE-2009-3720 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2009-3720 的情报信息
请登录查看更多情报信息。
CVE-2009-3720 厂商安全公告 (34)
-
https://bugzilla.redhat.com/show_bug.cgi?id=531697 x_refsource_CONFIRM
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:212 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:218 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:219 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:217 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:216 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:220 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:211 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:215 vendor-advisory x_refsource_MANDRIVA
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7112 vdb-entry signature x_refsource_OVAL
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12719 vdb-entry signature x_refsource_OVAL
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11019 vdb-entry signature x_refsource_OVAL
CVE-2009-3720 邮件列表归档 (43)
-
🔗 '[security bulletin] HPSBUX02645 SSRT100387 rev.1 - HP-UX Apache Web Server, Remote Information Discl' - MARC 查看完整文章 vendor-advisory x_refsource_HP
-
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html vendor-advisory x_refsource_SUSE
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html vendor-advisory x_refsource_FEDORA
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051442.html vendor-advisory x_refsource_FEDORA
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051405.html vendor-advisory x_refsource_FEDORA
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html vendor-advisory x_refsource_FEDORA
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html vendor-advisory x_refsource_FEDORA
-
-
-
-
-
-
-
-
-
-
https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
-
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
-
https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E mailing-list x_refsource_MLIST
CVE-2009-3720 其他参考 (12)
-
http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?view=log x_refsource_CONFIRM
-
http://svn.python.org/view?view=rev&revision=74429 x_refsource_CONFIRM
-
http://sunsolve.sun.com/search/document.do?assetkey=1-66-273630-1 vendor-advisory x_refsource_SUNALERT
-
-
-
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 vendor-advisory x_refsource_SLACKWARE
-
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01274.html vendor-advisory x_refsource_FEDORA
-
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00413.html vendor-advisory x_refsource_FEDORA
-
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00370.html vendor-advisory x_refsource_FEDORA
-
同批安全公告 · n/a · 2009-11-03 · 共 6 条
| CVE-2009-3031 | Symantec Altiris Product ActiveX控件栈溢出漏洞 | |
| CVE-2009-3298 | Mahara 权限提升漏洞 | |
| CVE-2009-3299 | Mahara "resume blocktype" 跨站脚本漏洞 | |
| CVE-2009-3851 | Sun Solaris JDS ’xscreensaver(1)’本地信息泄露漏洞 | |
| CVE-2009-3852 | IBM Runtimes for Java Technology XML组件未明漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2009-3720
暂无评论