Skip to content

Xmlsoft Libxml vulnerabilities

xmlsoft libxml2, canonical ubuntu linux, debian linux +1 more +3 morelibxml2 through 2.9.1 does not properly handle external entities expansion unless an application...CVE-2013-0339Fix available6.8 MediumMarch 24, 2013
xmlsoft libxml2, canonical ubuntu linux, opensuse +2 morelibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...CVE-2013-0338Fix available4.3 MediumMarch 24, 2013
google chrome, xmlsoft libxml2, apple iphone os +2 moreHeap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0...CVE-2012-5134Fix available6.8 MediumNovember 28, 2012
google chrome, xmlsoft libxml2, apple iphone os +2 morelibxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly...CVE-2012-2871Fix available6.8 MediumAugust 31, 2012
xmlsoft libxml2, apple iphone os +1 morelibxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash...CVE-2012-0841Fix available5.0 MediumFebruary 22, 2012
xmlsoft libxml, libxml2 +1 moreInteger overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1...CVE-2011-1944Public exploitFix availableEPSS 13.4%9.3 HighJune 6, 2011
google chrome, xmlsoft libxml2, apache openoffice +14 more +16 moreDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...CVE-2010-4494Fix available7.5 HighDecember 7, 2010
apple safari, google chrome, xmlsoft libxml2 +12 more +14 morelibxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier,...CVE-2010-4008Fix available4.3 MediumNovember 16, 2010
xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 MediumAugust 10, 2009
xmlsoft libxml, libxml2 +1 moreStack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml...CVE-2009-2414Fix available4.3 MediumAugust 10, 2009
xmlsoft libxmlInteger overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent...CVE-2008-4226Fix available10.0 HighNovember 17, 2008
xmlsoft libxmlInteger overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent...CVE-2008-4225Fix available7.8 HighNovember 17, 2008
xmlsoft libxml2libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities,...CVE-2008-4409Public exploit5.0 MediumOctober 3, 2008
xmlsoft libxml2, apple iphone os, mac os x +3 more +5 moreHeap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before...CVE-2008-3529Public exploitFix availableEPSS 23.4%10.0 HighSeptember 12, 2008
xmlsoft libxml2, apple iphone os, safari +8 more +10 morelibxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an...CVE-2008-3281Fix available6.5 MediumAugust 22, 2008
xmlsoft libxml, libxml2, redhat fedora core +3 more +5 moreMultiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may...CVE-2004-0989Public exploitFix availableEPSS 21.7%10.0 HighOctober 28, 2004
xmlsoft libxml, libxml2, sgi propack +2 moreBuffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0...CVE-2004-0110Public exploitFix availableEPSS 24.2%7.5 HighMarch 3, 2004
xmlsoft libxml2libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which...CVE-2003-15646.5 MediumDecember 31, 2003