PT-2016-2025 · Apple+6 · Ios+9

Kostya Serebryany

·

Published

2016-05-20

·

Updated

2024-06-15

·

CVE-2016-1840

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.4 Apple iOS versions prior to 9.3.2 OS X versions prior to 10.11.5 tvOS versions prior to 9.2.1 watchOS versions prior to 2.2.1
Description The issue is caused by a heap-based buffer overflow in the xmlFAParsePosCharGroup function. This can be exploited by a remote attacker using a specially crafted XML document, potentially allowing them to execute arbitrary code or cause a denial of service due to memory corruption.
Recommendations For libxml2 versions prior to 2.9.4, update to version 2.9.4 or later. For Apple iOS versions prior to 9.3.2, update to version 9.3.2 or later. For OS X versions prior to 10.11.5, update to version 10.11.5 or later. For tvOS versions prior to 9.2.1, update to version 9.2.1 or later. For watchOS versions prior to 2.2.1, update to version 2.2.1 or later. As a temporary workaround, consider restricting the use of the xmlFAParsePosCharGroup function until a patch is available. Avoid using specially crafted XML documents that could exploit the buffer overflow vulnerability.

Exploit

Fix

RCE

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2017-1240
BDU:2016-01376
CESA-2016_1292
CVE-2016-1840
DLA-503-1
DSA-3593-1
MGASA-2016-0263
OPENSUSE-SU-2016_1594-1
OPENSUSE-SU-2016_1595-1
OPENSUSE-SU-2024:10192-1
OPENSUSE-SU-2024:10228-1
RHSA-2016:1292
RHSA-2016_1292
SUSE-SU-2016:1538-1
SUSE-SU-2016:1604-1
SUSE-SU-2017:2699-1
SUSE-SU-2017:2700-1
USN-2994-1

Affected Products

Alt Linux
Centos
Os X
Red Hat
Suse
Ubuntu
Ios
Libxml2
Tvos
Watchos