CVE-2015-8242 in iOS

Summary

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 11/18/2015
• Disclosure: 12/14/2015
• Moderation: VulDB entry created
• Entries: 3: VDB-81504
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01368
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-8242
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-8242
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-8242/