Vulnerability Description
Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome | <= 23.0.1271.89 | |
| Xmlsoft | Libxml2 | <= 2.9.0 |
| Apple | Iphone Os | <= 6.1.4 |
Related Weaknesses (CWE)
References
- http://git.gnome.org/browse/libxml2/commit/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc
- http://googlechromereleases.blogspot.com/2012/11/stable-channel-update.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
- http://rhn.redhat.com/errata/RHSA-2012-1512.html
- http://rhn.redhat.com/errata/RHSA-2013-0217.html
- http://secunia.com/advisories/51448
- http://secunia.com/advisories/54886
- http://secunia.com/advisories/55568
- http://support.apple.com/kb/HT5934
- http://support.apple.com/kb/HT6001
- http://www.debian.org/security/2012/dsa-2580
FAQ
What is CVE-2012-5134?
CVE-2012-5134 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers t...
How severe is CVE-2012-5134?
CVE-2012-5134 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-5134?
Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome, Xmlsoft Libxml2, Apple Iphone Os.