PT-2015-3260

CVE-2015-8710

·

Publicado

2015-11-20

·

Atualizado

2020-02-26

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libxml2 (affected versions not specified)
Description The issue is related to the htmlParseComment function in HTMLparser.c of the libxml2 library, caused by a buffer overflow. This can be exploited by a remote attacker using an unclosed HTML comment to obtain sensitive information, cause a denial of service (application crash due to out-of-bounds heap memory access), or have other unspecified impacts.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
ALT-PU-2015-2016
CESA-2015_2550
DLA-266-1
DSA-3430-1
MGASA-2015-0457
RHSA-2015:2549
RHSA-2015_2549
RHSA-2015:2550
RHSA-2015_2550
SUSE-SU-2016:0178-1
SUSE-SU-2016_0178-1
SUSE-SU-2016:0187-1
SUSE-SU-2016_0187-1
SUSE-SU-2016:0786-1
USN-2875-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾