PT-2016-3449 · Xmlsoft+9 · Libxml2+9

Patrick Toomey

·

Publicado

2016-08-11

·

Atualizado

2024-09-05

·

CVE-2016-3709

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions libxml2 (affected versions not specified)
Description The issue is related to a possible cross-site scripting vulnerability in libxml2. This vulnerability may allow a remote attacker to access and compromise confidential data. The vulnerability is associated with the lack of protection measures for the structure of web pages.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALSA-2022:7715
ALT-PU-2021-2057
ALT-PU-2021-3332
AZL-10442
BDU:2023-07602
CESA-2022_7715
CVE-2016-3709
DLA-3878-1
MGASA-2022-0290
OESA-2022-1828
OESA-2022-1829
OPENSUSE-SU-2022_3871-1
RHSA-2022:7715
RHSA-2022_7715
RHSA-2023:4767
RLSA-2022:7715
SUSE-SU-2022:3717-1
SUSE-SU-2022:3871-1
SUSE-SU-2022_3717-1
SUSE-SU-2022_3871-1
SUSE-SU-2023:3665-1
SUSE-SU-2023_3665-1
USN-5548-1

Produtos afetados

Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
Libxml2