Search for packages
Package details: pkg:deb/ubuntu/ayttm@0.5.0%2B10-9
purl pkg:deb/ubuntu/ayttm@0.5.0%2B10-9
Next non-vulnerable version 0.6.1-2
Latest non-vulnerable version 0.6.1-2
Risk 3.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-8dyd-depr-aaam
Aliases:
CVE-2009-3560
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
0.6.1-2
Affected by 0 other vulnerabilities.
VCID-c7e7-cdc7-aaam
Aliases:
CVE-2009-3720
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.
0.6.1-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version