Debian: CVE-2018-20004: mxml -- security update
|7||(AV:N/AC:M/Au:N/C:P/I:P/A:P)||December 10, 2018||February 20, 2019||February 20, 2019|
An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the '<order type="real">' substring, as demonstrated by testmxml.
Scan For This Vulnerability
Use our top-rated tool to discover, prioritize, and remediate your vulnerabilities