Vulnerabilities > CVE-2021-21811 - Integer Underflow (Wrap or Wraparound) vulnerability in ATT Xmill 0.7

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
att
CWE-191

Summary

A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. A specially crafted XML file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Att
1

Common Weakness Enumeration (CWE)