PT-2010-1006 · Xmlsoft+3 · Libxml2+3

Yang Dingning

·

Publicado

2010-12-07

·

Atualizado

2020-05-19

·

CVE-2011-2821

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.7.8 Google Chrome versions prior to 13.0.782.215
Description The issue is related to a double free vulnerability in libxml2, which can be exploited by remote attackers via a crafted XPath expression, potentially leading to a denial of service or other unspecified impacts. The vulnerability can be exploited remotely and may lead to disruption of confidentiality, integrity, and availability of protected information.
Recommendations For libxml2 versions prior to 2.7.8, update to version 2.7.8 or later to resolve the issue. For Google Chrome versions prior to 13.0.782.215, update to version 13.0.782.215 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Double Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-415

Identificadores relacionados

BDU:2015-01746
BDU:2015-06428
BDU:2015-06429
BDU:2015-06430
BDU:2015-08639
BDU:2015-08640
BDU:2015-08641
BDU:2015-09421
CESA-2013_0217
CVE-2011-2821
DSA-2394-1
RHSA-2011:1749
RHSA-2011_1749
RHSA-2013:0217
RHSA-2013_0217

Produtos afetados

Centos
Google Chrome
Red Hat
Libxml2