Lucene search

K
exploitdbChris EvansEDB-ID:35810
HistoryMay 31, 2011 - 12:00 a.m.

libxmlInvalid 2.7.x - XPath Multiple Memory Corruption Vulnerabilities

2011-05-3100:00:00
Chris Evans
www.exploit-db.com
19

AI Score

7.4

Confidence

Low

EPSS

0.007

Percentile

80.6%

source: https://www.securityfocus.com/bid/48056/info

The 'libxml2' library is prone to multiple memory-corruption vulnerabilities, including one that can trigger a heap-based buffer-overflow error and an integer-overflow condition.



An attacker can exploit these issues by enticing an unsuspecting user into opening a specially crafted XML file that contains a malicious XPath.



A successful attack can allow attacker-supplied code to run in the context of the application using the vulnerable library or can cause a denial-of-service condition.


//@*/preceding::node()/ancestor::node()/ancestor::foo['foo']