CVE-2006-10003

CVE-2006-10003 identifies an off-by-one heap buffer overflow in XML::Parser versions through 2.47 for Perl, specifically affecting the st_serial_stack function when parsing XML files with very deep element nesting. This critical vulnerability, rated 9.8 CVSS, is network-exploitable with low attack complexity and no user interaction, potentially leading to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code available, the issue has received community discussion and media coverage, prompting security updates from vendors.