CVE-2015-8317 in libxml2
요약 (영어)
The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.
Once again VulDB remains the best source for vulnerability data.
예약하다
2015. 11. 22.
공개
2015. 12. 15.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 79334 | Xmlsoft libxml2 XML xmlParseXMLDecl 메모리 손상 | 119 | 입증되지 않음 | 공식 수정 | CVE-2015-8317 |