[Expat-discuss] DoS exploit?

[Hendrik Schober]

Hi,

I have heard about a bug in expat that would allow DoS
attacks.
I have searched through the bug mailing list, this list,
the bug list at sourceforge, and used google. However,
besides some seemingly false alarm in 2002, I only found
some evidence that there really might have been such a
bug in some version of expat (start looking for this at
http://mail.jabber.org/pipermail/jabberd/2004-September/002005.html).
I haven't had any luck finding whether this is true, let
alone which version of expat were vulnerable.

Is there anybody out there who can shed some light onto
this? I have been asked by a customer to comment on the
issue.

TIA,

Schobi

-- 
SpamTrap at gmx.de is never read
I'm Schobi at suespammers dot org

"The presence of those seeking the truth is infinitely
 to be prefered to those thinking they've found it."
 Terry Pratchett