Published: 13/12/2023 Updated: 12/01/2024

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML up to and including 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tinyxml project tinyxml

Debian Bug report logs - #1059315 tinyxml: CVE-2023-34194 CVE-2023-40462 CVE-2023-40458 Package: src:tinyxml; Maintainer for src:tinyxml is Felix Geyer <fgeyer@debianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 22 Dec 2023 13:54:02 UTC Severity: important Tags: security, upstream Reply or ...

CWE-617 https://sourceforge.net/p/tinyxml/git/ci/master/tree/tinyxmlparser.cpp https://www.forescout.com/resources/sierra21-vulnerabilities https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QCR5PIOBGDIDS6SYRESTMDJSEDFSCOE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOMBSHRIW5Q34SQSXYURYAOYDZD2NQF6/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059315 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-34194

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect