CVEvulnerability

CVE-2012-5134

6.8 MEDIUM Published 2012-11-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-11-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.

Affected configurations

• google chrome (<= 23.0.1271.89) • google chrome 23.0.1271.0 • google chrome 23.0.1271.1 • google chrome 23.0.1271.2 • google chrome 23.0.1271.3 • google chrome 23.0.1271.4 • google chrome 23.0.1271.5 • google chrome 23.0.1271.6 • google chrome 23.0.1271.7 • google chrome 23.0.1271.8 • google chrome 23.0.1271.10 • google chrome 23.0.1271.11 • google chrome 23.0.1271.12 • google chrome 23.0.1271.13 • google chrome 23.0.1271.14 • google chrome 23.0.1271.15 • google chrome 23.0.1271.16 • google chrome 23.0.1271.17 • google chrome 23.0.1271.18 • google chrome 23.0.1271.19 • google chrome 23.0.1271.20 • google chrome 23.0.1271.21 • google chrome 23.0.1271.22 • google chrome 23.0.1271.23 • google chrome 23.0.1271.24 • google chrome 23.0.1271.26 • google chrome 23.0.1271.30 • google chrome 23.0.1271.31 • google chrome 23.0.1271.32 • google chrome 23.0.1271.33 • google chrome 23.0.1271.35 • google chrome 23.0.1271.36 • google chrome 23.0.1271.37 • google chrome 23.0.1271.38 • google chrome 23.0.1271.39 • google chrome 23.0.1271.40 • google chrome 23.0.1271.41 • google chrome 23.0.1271.44 • google chrome 23.0.1271.45 • google chrome 23.0.1271.46 • google chrome 23.0.1271.49 • google chrome 23.0.1271.50 • google chrome 23.0.1271.51 • google chrome 23.0.1271.52 • google chrome 23.0.1271.53 • google chrome 23.0.1271.54 • google chrome 23.0.1271.55 • google chrome 23.0.1271.56 • google chrome 23.0.1271.57 • google chrome 23.0.1271.58 • google chrome 23.0.1271.60 • google chrome 23.0.1271.61 • google chrome 23.0.1271.62 • google chrome 23.0.1271.64 • google chrome 23.0.1271.83 • google chrome 23.0.1271.84 • google chrome 23.0.1271.85 • google chrome 23.0.1271.86 • google chrome 23.0.1271.87 • google chrome 23.0.1271.88 … and 165 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References