Lucene search

K
freebsdFreeBSD7BE92050-A450-11E2-9898-001060E06FD4
HistorySep 02, 2011 - 12:00 a.m.

libxml -- Integer overflow

2011-09-0200:00:00
vuxml.freebsd.org
16

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.1%

Integer overflow in xpath.c, allows context-dependent attackers
to to cause a denial of service (crash) and possibly execute
arbitrary code via a crafted XML file that triggers a heap-based
buffer overflow when adding a new namespace node, related to
handling of XPath expressions.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibxml< 1.8.17_5UNKNOWN
FreeBSDanynoarchlibxml2< 2.7.8UNKNOWN
FreeBSDanynoarchlinux-f10-libxml2< 2.7.8UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.1%