CVE-2015-7942 in iOS

Summary

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

10/22/2015

Disclosure

11/18/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
81502	Apple iOS libxml2 memory corruption	119	Not defined	Official fix	CVE-2015-7942
81457	Apple Mac OS X libxml2 memory corruption	119	Not defined	Official fix	CVE-2015-7942
79258	libxml2 XML Data parser.c xmlParseConditionalSections memory corruption	119	Not defined	Official fix	CVE-2015-7942

Sources

• MITRE
• NVD
• CVE Details