CVE-2006-10003 - Vulnerability Analysis

Overview

XML::Parser for Perl <= 2.47 contains an off-by-one heap buffer overflow caused by improper stack pointer handling in st_serial_stack, letting attackers cause memory corruption when parsing deeply nested XML files, exploit requires crafted XML input.

Severity & Score

Impact

Attackers can cause memory corruption leading to potential denial of service or code execution.

Mitigation

Update to a version later than 2.47 or the latest available version.

References

• https://github.com/cpan-authors/XML-Parser/commit/3eb9cc95420fa0c3f76947c4708962546bf27cfd.patch
• https://github.com/cpan-authors/XML-Parser/issues/39
• https://rt.cpan.org/Ticket/Display.html?id=19860
• http://www.openwall.com/lists/oss-security/2026/03/19/2

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner