NetSight
IP …
medium5.8

CVE-2015-8242

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of…

Impact

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

Affected products

VendorProductAffected versions
XmlsoftLibxml2
through 2.9.2
HpIcewall Federation Agent
Version 3.0
HpIcewall File Manager
Version 3.0
AppleIphone Os
through 9.2.1
AppleMac Os X
through 10.11.3
AppleTvos
through 9.1
AppleWatchos
through 2.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Hpc Node
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0

Weakness classification

CWE-119

References