SUSE-SU-2017:1587-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2017-9050: heap-based buffer overflow xmlDictAddString func bsc1039069, bsc1039661 - CVE-2017-9049: heap-based buffer overflow xmlDictComputeFastKey func bsc1039066 - CVE-2017-9048: stack overflow vulnerability xmlSnprintfElementContent fu...

CVE-2017-7375

A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher-risk attack surface in libxml2 not...

CVE-2017-7376

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects...

Remote code execution

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

DEBIAN-CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

CVE-2017-0663

CVE-2017-0663: libxml2 remote code execution via a crafted file. The Android-impacting flaw is a libxml2 out-of-bounds write that can crash or enable code execution in an unprivileged process. Exploitation and impact are stated in the CVE entry, with high severity (CVSSv3 7.8). No public fix vers...

CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

CVE-2017-0663: Out-of-bounds Write

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

PT-2017-10590

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A remote code execution issue in libxml2 could allow an attacker to execute arbitrary code within the context of an unprivileged process by using a specially craft...

CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

UBUNTU-CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2017:1557-1)

This update for libxml2 fixes the following issues: Security issues fixed : - CVE-2017-9050: heap-based buffer overflow xmlDictAddString func bsc1039069, bsc1039661 - CVE-2017-9049: heap-based buffer overflow xmlDictComputeFastKey func bsc1039066 - CVE-2017-9048: stack overflow vulnerability...

SUSE-SU-2017:1557-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: - CVE-2017-9050: heap-based buffer overflow xmlDictAddString func bsc1039069, bsc1039661 - CVE-2017-9049: heap-based buffer overflow xmlDictComputeFastKey func bsc1039066 - CVE-2017-9048: stack overflow vulnerability...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1538-1)

This update for libxml2 fixes the following security issues : - CVE-2017-9050: A heap-based buffer over-read in xmlDictAddString bsc1039069, bsc1039661 - CVE-2017-9049: A heap-based buffer overflow in xmlDictComputeFastKey bsc1039066 - CVE-2017-9048: A stack overflow vulnerability in...

SUSE-SU-2017:1538-1 Security update for libxml2

This update for libxml2 fixes the following security issues: CVE-2017-9050: A heap-based buffer over-read in xmlDictAddString bsc1039069, bsc1039661 CVE-2017-9049: A heap-based buffer overflow in xmlDictComputeFastKey bsc1039066 CVE-2017-9048: A stack overflow vulnerability in...

About the security content of iTunes 12.4.2 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...