PT-2010-1007 · Xmlsoft+3 · Libxml2+3
Yang Dingning
·
Published
2010-12-07
·
Updated
2020-05-08
·
CVE-2011-2834
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
libxml2 versions prior to 2.7.8
libxml2 version 2.7.6
Google Chrome versions prior to 14.0.835.163
Description
The issue is related to multiple vulnerabilities in the libxml2 package, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The vulnerabilities are related to XPath handling and can cause a denial of service or have unspecified other impacts.
Recommendations
For libxml2 versions prior to 2.7.8, update to version 2.7.8 or later.
For Google Chrome versions prior to 14.0.835.163, update to version 14.0.835.163 or later.
For libxml2 version 2.7.6, consider disabling the vulnerable components related to XPath handling until a patch is available.
At the moment, there is no information about additional mitigation measures for other affected versions.
Exploit
Fix
DoS
Buffer Overflow
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Google Chrome
Red Hat
Libxml2