Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2009-08-11	CVE-2009-2416	Use After Free vulnerability in multiple products Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework. network low complexity xmlsoft fedoraproject debian redhat canonical google apple suse opensuse vmware sun CWE-416	6.5
2008-08-27	CVE-2008-3281	XML Entity Expansion vulnerability in multiple products libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document. network low complexity xmlsoft apple fedoraproject canonical debian redhat vmware CWE-776	6.5