NetSight
IP …
high8.1

CVE-2016-1762

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

Impact

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

Affected products

VendorProductAffected versions
AppleSafari
before 9.1
AppleIphone Os
before 9.3
AppleMac Os X
before 10.11.4
AppleTvos
before 9.2
AppleWatchos
before 2.2
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
XmlsoftLibxml2
before 2.9.4
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.2, 7.3, 7.4, 7.5, 7.6

Weakness classification

CWE-119CWE-122

References