Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xmlsoft libxml2 1.8.16 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-0339
libxml2 up to and including 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote malicious users to cause a denial of service (resource consumption), se...
Xmlsoft Libxml2 2.2.0Xmlsoft Libxml2 2.2.2Xmlsoft Libxml2 2.4.30Xmlsoft Libxml2 2.6.16Xmlsoft Libxml2 1.8.0Xmlsoft Libxml2 1.8.16Xmlsoft Libxml2 2.6.32Xmlsoft Libxml2 2.1.0Xmlsoft Libxml2 2.6.29Xmlsoft Libxml2 2.4.19Xmlsoft Libxml2 2.4.7Xmlsoft Libxml2 2.4.17Xmlsoft Libxml2 2.2.9Xmlsoft Libxml2 2.8.0Xmlsoft Libxml2 2.3.6Xmlsoft Libxml2 2.6.26Xmlsoft Libxml2 2.6.11Xmlsoft Libxml2 1.7.1Xmlsoft Libxml2 2.7.2Xmlsoft Libxml2 2.4.21Xmlsoft Libxml2 2.4.20Xmlsoft Libxml2 2.3.7
NA
CVE-2013-0338
libxml2 2.9.0 and previous versions allows context-dependent malicious users to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansi...
Xmlsoft Libxml2 1.7.0Xmlsoft Libxml2 1.7.1Xmlsoft Libxml2 2.5.10Xmlsoft Libxml2 2.4.23Xmlsoft Libxml2 2.4.28Xmlsoft Libxml2 2.4.29Xmlsoft Libxml2 2.4.22Xmlsoft Libxml2 2.6.17Xmlsoft Libxml2 2.4.9Xmlsoft Libxml2 2.4.8Xmlsoft Libxml2 2.4.12Xmlsoft Libxml2 2.4.15Xmlsoft Libxml2 2.4.14Xmlsoft Libxml2 2.2.0Xmlsoft Libxml2 1.7.2Xmlsoft Libxml2 2.6.11Xmlsoft Libxml2 2.4.19Xmlsoft Libxml2 2.6.14Xmlsoft Libxml2 2.4.26Xmlsoft Libxml2 2.4.27Xmlsoft Libxml2 2.6.22Xmlsoft Libxml2 2.4.21
NA
CVE-2011-1944
Integer overflow in xpath.c in libxml2 2.6.x up to and including 2.6.32 and 2.7.x up to and including 2.7.8, and libxml 1.8.16 and previous versions, allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XM...
Xmlsoft Libxml2 2.6.26Xmlsoft Libxml2 2.6.30Xmlsoft Libxml2 2.6.5Xmlsoft Libxml2 2.6.6Xmlsoft Libxml2 2.6.13Xmlsoft Libxml2 2.6.9Xmlsoft Libxml2 2.6.22Xmlsoft Libxml2 2.6.27Xmlsoft Libxml2 2.6.11Xmlsoft Libxml2 2.6.1Xmlsoft Libxml2 2.6.0Xmlsoft Libxml2 2.6.2Xmlsoft Libxml2 2.6.12Xmlsoft Libxml2 2.6.17Xmlsoft Libxml2 2.6.16Xmlsoft Libxml2 2.6.3Xmlsoft Libxml2 2.6.4Xmlsoft Libxml2 2.6.7Xmlsoft Libxml2 2.6.8Xmlsoft Libxml2 2.6.20Xmlsoft Libxml2 2.6.18Xmlsoft Libxml2 2.6.14
NA
CVE-2012-0841
libxml2 prior to 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent malicious users to cause a denial of service (CPU consumption) via crafted XML data.
Xmlsoft Libxml2 2.2.0Xmlsoft Libxml2 2.2.2Xmlsoft Libxml2 2.4.30Xmlsoft Libxml2 2.6.16Xmlsoft Libxml2 1.8.0Xmlsoft Libxml2 1.8.16Xmlsoft Libxml2 2.6.32Xmlsoft Libxml2 2.1.0Xmlsoft Libxml2 2.6.29Xmlsoft Libxml2 2.4.19Xmlsoft Libxml2 2.4.7Xmlsoft Libxml2 2.4.17Xmlsoft Libxml2 2.2.9Xmlsoft Libxml2 2.3.6Xmlsoft Libxml2 2.6.26Xmlsoft Libxml2 2.6.11Xmlsoft Libxml2 1.7.1Xmlsoft Libxml2 2.7.2Xmlsoft Libxml2 2.4.21Xmlsoft Libxml2 2.4.20Xmlsoft Libxml2 2.3.7Xmlsoft Libxml2 2.6.17
NA
CVE-2012-5134
Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and previous versions, as used in Google Chrome prior to 23.0.1271.91 and other products, allows remote malicious users to cause a denial of service or possibly execute arbitrary code...
Google Chrome 23.0.1271.87Google Chrome 23.0.1271.58Xmlsoft Libxml2 2.2.0Xmlsoft Libxml2 2.2.2Google Chrome 23.0.1271.19Google Chrome 23.0.1271.51Xmlsoft Libxml2 2.4.30Xmlsoft Libxml2 2.6.16Xmlsoft Libxml2 1.8.0Xmlsoft Libxml2 1.8.16Xmlsoft Libxml2 2.6.32Xmlsoft Libxml2 2.1.0Xmlsoft Libxml2 2.4.19Xmlsoft Libxml2 2.4.7Xmlsoft Libxml2 2.4.17Xmlsoft Libxml2 2.2.9Google Chrome 23.0.1271.45Google Chrome 23.0.1271.18Xmlsoft Libxml2 2.3.6Xmlsoft Libxml2 2.6.26Google Chrome 23.0.1271.17Xmlsoft Libxml2 2.6.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook