CVE-2006-10003

Name of the Vulnerable Software and Affected Versions XML::Parser versions through 2.47

Description The software contains a heap buffer overflow in the st serial stack function. This occurs when parsing XML files with deeply nested elements. Specifically, when stackptr equals stacksize - 1, the stack is not expanded, and a new value is written outside the allocated buffer at the stacksize location.

Recommendations Update to a version of XML::Parser later than 2.47.