It was discovered that libxml2, the GNOME XML library, didn’t correctly
handle long entity names. This could allow the execution of arbitrary
code via a malicious XML file.
…
Den aktuellen Originalartikel dazu lesen auf DSA-1654 libxml2 – buffer overflow