Show filters
113 Total Results
Displaying 71-80 of 113
Sort by:
Attacker Value
Unknown
CVE-2015-8806
Disclosure Date: April 13, 2016 (last updated November 25, 2024)
dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.
0
Attacker Value
Unknown
CVE-2015-8710
Disclosure Date: April 11, 2016 (last updated November 25, 2024)
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.
0
Attacker Value
Unknown
CVE-2016-1762
Disclosure Date: March 24, 2016 (last updated November 25, 2024)
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
0
Attacker Value
Unknown
CVE-2016-2073
Disclosure Date: February 12, 2016 (last updated November 25, 2024)
The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.
0
Attacker Value
Unknown
CVE-2015-7497
Disclosure Date: December 15, 2015 (last updated October 05, 2023)
Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-7500
Disclosure Date: December 15, 2015 (last updated October 05, 2023)
The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.
0
Attacker Value
Unknown
CVE-2015-7499
Disclosure Date: December 15, 2015 (last updated October 05, 2023)
Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-7498
Disclosure Date: December 15, 2015 (last updated October 05, 2023)
Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.
0
Attacker Value
Unknown
CVE-2015-5312
Disclosure Date: December 15, 2015 (last updated October 05, 2023)
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
0
Attacker Value
Unknown
CVE-2015-8241
Disclosure Date: December 15, 2015 (last updated October 05, 2023)
The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
0
