[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-1944

Date: (C)2011-09-02   (M)2017-05-05
 
CVSS Score: 9.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.

Reference:
http://seclists.org/fulldisclosure/2015/Apr/5
SECUNIA-44711
BID-48056
OSVDB-73248
APPLE-SA-2012-05-09-1
APPLE-SA-2012-09-19-1
DSA-2255
FEDORA-2011-7856
HPSBMU02786
IAVM:2012-A-0073
IAVM:2012-A-0114
IAVM:2012-A-0153
MDVSA-2011:131
RHSA-2011:1749
RHSA-2013:0217
SSRT100877
USN-1153-1
http://www.openwall.com/lists/oss-security/2011/05/31/8
http://git.gnome.org/browse/libxml2/commit/?id=d7958b21e7f8c447a26bb2436f08402b2c308be4
http://packetstormsecurity.com/files/131271/VMware-Security-Advisory-2015-0003.html
http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-and-interesting.html
http://support.apple.com/kb/HT5281
http://support.apple.com/kb/HT5503
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
https://bugzilla.redhat.com/show_bug.cgi?id=709747
openSUSE-SU-2011:0839

CPE    32
cpe:/a:xmlsoft:libxml2:2.7.8
cpe:/a:xmlsoft:libxml2:2.6.26
cpe:/a:xmlsoft:libxml2:2.7.5
cpe:/a:xmlsoft:libxml2:2.7.4
...
CWE    1
CWE-189
OVAL    18
oval:org.secpod.oval:def:102728
oval:org.secpod.oval:def:102923
oval:org.secpod.oval:def:301058
oval:org.secpod.oval:def:700533
...

© 2013 SecPod Technologies