Centerim also embeds expat in libjabber. expat does xml parsing. I have
confirmed that the fix for cve-2009-3720 has not been applied to the
centerim sources. There is another associated expat vulnerability that might
be present also but I have not investigated. They are both denial of
services.Not sure how these would be triggered.

Reply via email to