Contents

---
engine: ruby
cve: 2008-3790
osvdb: 47753
url: http://www.osvdb.org/show/osvdb/47753
title: Ruby REXML Library Crafted XML Document Handling DoS
date: 2008-08-25
description: |
  The REXML module in Ruby 1.8.6 through 1.8.6-p287,
  1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial
  of service (CPU consumption) via an XML document with recursively nested entities,
  aka an "XML entity explosion."
cvss_v2: 5.0
patched_versions:
  - ~> 1.8.7.160
  - ">= 1.9.1"

Version data entries

6 entries across 6 versions & 2 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/rubies/ruby/CVE-2008-3790.yml
bundler-budit-0.6.2	data/ruby-advisory-db/rubies/ruby/OSVDB-47753.yml
bundler-budit-0.6.1	data/ruby-advisory-db/rubies/ruby/OSVDB-47753.yml
bundler-audit-0.6.1	data/ruby-advisory-db/rubies/ruby/OSVDB-47753.yml
bundler-audit-0.6.0	data/ruby-advisory-db/rubies/ruby/OSVDB-47753.yml
bundler-audit-0.5.0	data/ruby-advisory-db/rubies/ruby/OSVDB-47753.yml