Search for packages
Package details: pkg:deb/debian/tdom@0.7.8-4
purl pkg:deb/debian/tdom@0.7.8-4
Next non-vulnerable version 0.8.3~20080525-2
Latest non-vulnerable version 0.8.3~20080525-2
Risk 1.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-cjbk-v93c-hyav
Aliases:
CVE-2009-3560
A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM.
0.8.3~20080525-2
Affected by 0 other vulnerabilities.
VCID-decx-ng47-vfcr
Aliases:
CVE-2009-3720
A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM.
0.8.3~20080525-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T15:53:10.363874+00:00 Debian Oval Importer Affected by VCID-decx-ng47-vfcr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:05:23.974955+00:00 Debian Oval Importer Affected by VCID-cjbk-v93c-hyav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0