VYPR
Unrated severityNVD Advisory· Published Jan 12, 2008· Updated Apr 23, 2026

CVE-2007-6284

CVE-2007-6284

Description

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.

Affected products

38
  • Debian/Debian Linux26 versions
    cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*+ 25 more
    • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:x86_64:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:*
  • Red Hat/Fedora2 versions
    cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:fedora:8:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

42

News mentions

0

No linked articles in our index yet.