Approved changes feed: RSS · Atom

cpe:2.3:a:xmlsoft:libxml:1.7.2:*:*:*:*:*:*:*

part: a version: 1.7.2 update: *

VendorXmlsoft (be3c3366-cde4-54a5-8785-eb1f04df6881)
ProductLibxml (f89c0642-2788-525e-bd8d-9155e2e32eaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxml++2.6 purl2cpe 2026-06-01 10:12:19.546423
pkg:gitlab/gnome/libxml2 purl2cpe 2026-06-01 10:12:19.546425
pkg:maven/com.viliussutkus89.licenseonly/libxml purl2cpe 2026-06-01 10:12:19.546426
pkg:nuget/libxml2 purl2cpe 2026-06-01 10:12:19.546428

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1944 vulnerable 2026-06-08 04:58:03.191541 Details available
Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
Published: 2011-09-02T16:00:00.000Z
Updated: 2024-08-06T22:46:00.842Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.