CVE-2006-10002 - Vulnerability Analysis

Overview

XML::Parser for Perl <= 2.47 contains a buffer overflow caused by mismatched UTF-8 byte handling in parse_stream() in Expat.xs, letting attackers cause heap corruption and crashes, exploit requires crafted XML input.

Severity & Score

Impact

Attackers can cause heap corruption and crashes, leading to denial of service.

Mitigation

Update to the latest version beyond 2.47.

References

• https://rt.cpan.org/Ticket/Display.html?id=19859
• http://www.openwall.com/lists/oss-security/2026/03/19/1
• https://github.com/cpan-authors/XML-Parser/commit/6b291f4d260fc124a6ec80382b87a918f372bc6b.patch
• https://github.com/cpan-authors/XML-Parser/issues/64

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner