PT-2017-14060 · Opera+7 · Opera+7

Nick Wellnhofer

·

Publicado

2017-12-06

·

Atualizado

2026-03-13

·

CVE-2017-15412

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.5 Google Chrome versions prior to 63.0.3239.84
Description A use after free issue in libxml2 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue affects various products, including Google Chrome and Opera.
Recommendations For libxml2 versions prior to 2.9.5, update to version 2.9.5 or later to resolve the issue. For Google Chrome versions prior to 63.0.3239.84, update to version 63.0.3239.84 or later to resolve the issue.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2017-2813
ALT-PU-2019-1924
ALT-PU-2019-3079
CESA-2020_1190
CVE-2017-15412
DLA-1211-1
DSA-4086-1
GHSA-R58R-74GX-6WX3
MGASA-2018-0048
MGASA-2018-0050
OPENSUSE-SU-2017:3245-1
OPENSUSE-SU-2017_3244-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:11340-1
OPENSUSE-SU-2024:11912-1
OPENSUSE-SU-2024:12948-1
OPENSUSE-SU-2024:13165-1
OPENSUSE-SU-2024:14174-1
OPENSUSE-SU-2025:14697-1
OPENSUSE-SU-2026:10356-1
RHSA-2017:3401
RHSA-2017_3401
RHSA-2020:1190
RHSA-2020_1190
SUSE-SU-2018:0395-1
SUSE-SU-2018:0401-1
USN-3513-1
USN-3513-2

Produtos afetados

Alt Linux
Centos
Google Chrome
Opera
Red Hat
Suse
Ubuntu
Libxml2