CVE-2015-7498 in libxml2

Sumário (Inglês)

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

29/09/2015

Divulgação

15/12/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
79337	Xmlsoft libxml2 Encoding Conversion Excesso de tampão	119	Não provado	Correção oficial	CVE-2015-7498

Fontes

• MITRE
• NVD
• CVE Details