| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | = 21.0.1180.0= 21.0.1180.1= 21.0.1180.2= 21.0.1180.31= 21.0.1180.32= 21.0.1180.33= 21.0.1180.34= 21.0.1180.35= 21.0.1180.36= 21.0.1180.37= 21.0.1180.38= 21.0.1180.39= 21.0.1180.41= 21.0.1180.46= 21.0.1180.47= 21.0.1180.48= 21.0.1180.49= 21.0.1180.50= 21.0.1180.51= 21.0.1180.52= 21.0.1180.53= 21.0.1180.54= 21.0.1180.55= 21.0.1180.56= 21.0.1180.57= 21.0.1180.59= 21.0.1180.60= 21.0.1180.61= 21.0.1180.62= 21.0.1180.63= 21.0.1180.64= 21.0.1180.68= 21.0.1180.69= 21.0.1180.70= 21.0.1180.71= 21.0.1180.72= 21.0.1180.73= 21.0.1180.74= 21.0.1180.75= 21.0.1180.76= 21.0.1180.77= 21.0.1180.78= 21.0.1180.79= 21.0.1180.80= 21.0.1180.81= 21.0.1180.82= 21.0.1180.83= 21.0.1180.84= 21.0.1180.85= 21.0.1180.86= 21.0.1180.87≤ 21.0.1180.88 | |
| libxml2 | ≤ 2.9.0 |
libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free