Skip to content

Xmlsoft vulnerabilities

Products

Newest

xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...CVE-2015-7500Fix available5.0 MediumNovember 26, 2015
xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 MediumNovember 26, 2015
xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...CVE-2015-7498Fix available5.0 MediumNovember 26, 2015
xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...CVE-2015-7497Fix available5.0 MediumNovember 26, 2015
xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerabilityCVE-2015-5312Fix available7.1 HighNovember 26, 2015
xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 MediumNovember 23, 2015
xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 MediumNovember 18, 2015
xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 MediumNovember 18, 2015
xmlsoft libxslt, apple iphone os, mac os x +2 more +4 moreThe xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node...CVE-2015-7995Fix available5.0 MediumNovember 5, 2015
xmlsoft libxml2, apple iphone os, mac os x +4 more +6 moreThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...CVE-2015-8035Fix available2.6 LowNovember 2, 2015
xmlsoft libxml2, apple iphone os, mac os x +6 more +8 moreThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...CVE-2015-7942Fix available6.8 MediumOctober 23, 2015
php, xmlsoft libxml2 +1 moreThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...CVE-2015-6838Fix available7.5 HighSeptember 9, 2015
php, xmlsoft libxml2 +1 moreThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...CVE-2015-6837Fix available7.5 HighSeptember 9, 2015
xmlsoft libxml2, debian linux +1 moreThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...CVE-2015-8710Public exploitFix available9.8 CriticalJuly 3, 2015
xmlsoft libxml2, canonical ubuntu linux +1 morelibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...CVE-2015-7941Fix available4.3 MediumJuly 3, 2015
xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 MediumJuly 3, 2015
xmlsoft libxml2, apple mac os x, canonical ubuntu linux +2 more +4 moreparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...CVE-2014-3660Fix available5.0 MediumOctober 16, 2014
xmlsoft libxsltxslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service ...CVE-2013-45204.3 MediumDecember 14, 2013
google chrome, xmlsoft libxml2 +1 moreparser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products...CVE-2013-2877Fix available5.0 MediumJuly 10, 2013
xmlsoft libxml2Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow...CVE-2013-19697.5 HighApril 25, 2013
xmlsoft libxslt, opensuse +1 morelibxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer...CVE-2012-6139Fix available5.0 MediumApril 3, 2013
xmlsoft libxml2, canonical ubuntu linux, debian linux +1 more +3 morelibxml2 through 2.9.1 does not properly handle external entities expansion unless an application...CVE-2013-0339Fix available6.8 MediumMarch 24, 2013
xmlsoft libxml2, canonical ubuntu linux, opensuse +2 morelibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...CVE-2013-0338Fix available4.3 MediumMarch 24, 2013
google chrome, xmlsoft libxml2, apple iphone os +2 moreHeap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0...CVE-2012-5134Fix available6.8 MediumNovember 28, 2012
google chrome, xmlsoft libxml2, apple iphone os +2 morelibxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly...CVE-2012-2871Fix available6.8 MediumAugust 31, 2012
google chrome, xmlsoft libxslt, apple iphone os +2 morelibxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly...CVE-2012-2870Fix available4.3 MediumAugust 31, 2012
xmlsoft libxml2, apple iphone os +1 morelibxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash...CVE-2012-0841Fix available5.0 MediumFebruary 22, 2012
google chrome, xmlsoft libxslt, suse linux enterprise desktop +2 more +4 morelibxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial...CVE-2011-3970Fix available4.3 MediumFebruary 9, 2012
xmlsoft libxml, libxml2 +1 moreInteger overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1...CVE-2011-1944Public exploitFix availableEPSS 13.4%9.3 HighJune 6, 2011
google chrome, xmlsoft libxslt +1 moreThe xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in...CVE-2011-1202Fix available4.3 MediumMarch 11, 2011
google chrome, xmlsoft libxml2, apache openoffice +14 more +16 moreDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...CVE-2010-4494Fix available7.5 HighDecember 7, 2010
apple safari, google chrome, xmlsoft libxml2 +12 more +14 morelibxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier,...CVE-2010-4008Fix available4.3 MediumNovember 16, 2010
xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 MediumAugust 10, 2009
xmlsoft libxml, libxml2 +1 moreStack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml...CVE-2009-2414Fix available4.3 MediumAugust 10, 2009
xmlsoft libxmlInteger overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent...CVE-2008-4226Fix available10.0 HighNovember 17, 2008
xmlsoft libxmlInteger overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent...CVE-2008-4225Fix available7.8 HighNovember 17, 2008
xmlsoft libxml2libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities,...CVE-2008-4409Public exploit5.0 MediumOctober 3, 2008
xmlsoft libxml2, apple iphone os, mac os x +3 more +5 moreHeap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before...CVE-2008-3529Public exploitFix availableEPSS 23.4%10.0 HighSeptember 12, 2008
xmlsoft libxml2, apple iphone os, safari +8 more +10 morelibxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an...CVE-2008-3281Fix available6.5 MediumAugust 22, 2008
xmlsoft libxsltMultiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction...CVE-2008-2935Public exploitFix availableEPSS 12.8%7.5 HighJuly 31, 2008
xmlsoft libxml, libxml2, redhat fedora core +3 more +5 moreMultiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may...CVE-2004-0989Public exploitFix availableEPSS 21.7%10.0 HighOctober 28, 2004
xmlsoft libxml, libxml2, sgi propack +2 moreBuffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0...CVE-2004-0110Public exploitFix availableEPSS 24.2%7.5 HighMarch 3, 2004
xmlsoft libxml2libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which...CVE-2003-15646.5 MediumDecember 31, 2003