CVE-2015-7498 in Xmlsoft libxml2
Summary
Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
09/29/2015
Disclosure
12/15/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 79337 | Xmlsoft libxml2 Encoding Conversion memory corruption | 119 | Unproven | Official fix | CVE-2015-7498 |