Approved changes feed: RSS · Atom

cpe:2.3:a:xmlsoft:libxml2:*:rc1:*:*:*:*:*:*

part: a version: * update: rc1

VendorXmlsoft (be3c3366-cde4-54a5-8785-eb1f04df6881)
ProductLibxml2 (b6949b35-db17-5df6-ad91-0baa70a48eb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2877 vulnerable 2026-06-08 05:04:28.569487 Details available
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.
Published: 2013-07-10T10:00:00.000Z
Updated: 2024-08-06T15:52:20.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2871 vulnerable 2026-06-08 05:02:06.873043 Details available
libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.
Published: 2012-08-31T19:00:00.000Z
Updated: 2024-08-06T19:50:04.101Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.