Lucene search
K

10 matches found

Veracode
Veracode
added 2018/05/17 2:17 a.m.22 views

Heap-Based Buffer Over-read

TinyXML2 is vulnerable to heap-based buffer over-read. The vulnerability can be triggered when the attacker parses a malicious data to XMLDocument::Parse function...

9.8CVSS9.1AI score0.00448EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2018/05/17 12:0 a.m.1 views

TinyXML2 'XMLDocument::Parse' function heap buffer overflow vulnerability

TinyXML2 is a C++-based open source XML parser . A heap buffer overflow vulnerability exists in the 'XMLDocument::Parse' function of the libtinyxml2.so file in TinyXML2 version 6.2.0. An attacker can exploit this vulnerability to cause a buffer out-of-bounds read...

9.8CVSS9.5AI score0.00448EPSS
Exploits0References1
OSV
OSV
added 2018/05/16 3:29 p.m.1 views

DEBIAN-CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS7.5AI score0.00448EPSS
Exploits0References1
Prion
Prion
added 2018/05/16 3:29 p.m.11 views

Heap overflow

DISPUTED TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

7.5CVSS9.6AI score0.00448EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2018/05/16 3:29 p.m.13 views

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS9.7AI score0.00448EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2018/05/16 3:29 p.m.13 views

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS7.4AI score0.00448EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2018/05/16 3:0 p.m.12 views

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.8CVSS9.8AI score0.00448EPSS
Exploits0
CVE
CVE
added 2018/05/16 3:0 p.m.44 views

CVE-2018-11210

TinyXML2 6.2.0 is affected by a heap-based buffer over-read in XMLDocument::Parse (libtinyxml2.so). The CVE-2018-11210 entry notes this is due to improper use of the library and not a vulnerability in tinyxml2. NVD data lists a high/severe impact (CVSS v3: 9.8, NETWORK/NO AUTH required; all impac...

9.8CVSS9.6AI score0.00448EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2018/05/16 3:0 p.m.11 views

CVE-2018-11210

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2...

9.7AI score0.00448EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2014/09/25 12:0 a.m.2 views

PT-2018-10401 · Tinyxml2 +2 · Tinyxml2 +2

Name of the Vulnerable Software and Affected Versions: TinyXML2 version 6.2.0 Description: The issue is related to a heap-based buffer over-read in the XMLDocument::Parse function. However, the developers of TinyXML2 have determined that the reported issue is due to improper use of the library an...

9.8CVSS9.5AI score0.00448EPSS
Exploits0References15
Rows per page
Query Builder