NetSight
IP …
high7.5

CVE-2016-4447

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underre…

Impact

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

Affected products

VendorProductAffected versions
HpIcewall Federation Agent
Version 3.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
DebianDebian Linux
Versions 7.0, 8.0
OracleVm Server
Versions 3.3, 3.4
AppleItunes
Version 12.4.1
AppleIphone Os
through 9.3.2
AppleMac Os X
through 10.11.5
AppleTvos
through 9.2.1
AppleWatchos
through 2.2.1
XmlsoftLibxml2
through 2.9.3
McafeeWeb Gateway
from 7.5.0.0 through 7.5.2.10
from 7.6.0.0 through 7.6.2.3

Weakness classification

CWE-119

References