| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | = 23.0.1271.0= 23.0.1271.1= 23.0.1271.10= 23.0.1271.11= 23.0.1271.12= 23.0.1271.13= 23.0.1271.14= 23.0.1271.15= 23.0.1271.16= 23.0.1271.17= 23.0.1271.18= 23.0.1271.19= 23.0.1271.2= 23.0.1271.20= 23.0.1271.21= 23.0.1271.22= 23.0.1271.23= 23.0.1271.24= 23.0.1271.26= 23.0.1271.3= 23.0.1271.30= 23.0.1271.31= 23.0.1271.32= 23.0.1271.33= 23.0.1271.35= 23.0.1271.36= 23.0.1271.37= 23.0.1271.38= 23.0.1271.39= 23.0.1271.4= 23.0.1271.40= 23.0.1271.41= 23.0.1271.44= 23.0.1271.45= 23.0.1271.46= 23.0.1271.49= 23.0.1271.5= 23.0.1271.50= 23.0.1271.51= 23.0.1271.52= 23.0.1271.53= 23.0.1271.54= 23.0.1271.55= 23.0.1271.56= 23.0.1271.57= 23.0.1271.58= 23.0.1271.6= 23.0.1271.60= 23.0.1271.61= 23.0.1271.62= 23.0.1271.64= 23.0.1271.7= 23.0.1271.8= 23.0.1271.83= 23.0.1271.84= 23.0.1271.85= 23.0.1271.86= 23.0.1271.87= 23.0.1271.88≤ 23.0.1271.89 | |
| libxml2 | = 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.8.0= 1.8.1= 1.8.10= 1.8.13= 1.8.14= 1.8.16= 1.8.2= 1.8.3= 1.8.4= 1.8.5= 1.8.6= 1.8.7= 1.8.9= 2.0.0= 2.1.0= 2.1.1= 2.2.0= 2.2.1= 2.2.10= 2.2.11= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2.7= 2.2.8= 2.2.9= 2.3.0= 2.3.1= 2.3.10= 2.3.11= 2.3.12= 2.3.13= 2.3.14= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.3.6= 2.3.7= 2.3.8= 2.3.9= 2.4.1= 2.4.10= 2.4.11= 2.4.12= 2.4.13= 2.4.14= 2.4.15= 2.4.16= 2.4.17= 2.4.18= 2.4.19= 2.4.2= 2.4.20= 2.4.21= 2.4.22= 2.4.23= 2.4.24= 2.4.25= 2.4.26= 2.4.27= 2.4.28= 2.4.29= 2.4.3= 2.4.30= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9= 2.5.0= 2.5.10= 2.5.11= 2.5.4= 2.5.7= 2.5.8= 2.6.0= 2.6.1= 2.6.11= 2.6.12= 2.6.13= 2.6.14= 2.6.16= 2.6.17= 2.6.18= 2.6.2= 2.6.20= 2.6.22= 2.6.26= 2.6.27= 2.6.3= 2.6.30= 2.6.32= 2.6.4= 2.6.5= 2.6.6= 2.6.7= 2.6.8= 2.6.9= 2.7.0= 2.7.1= 2.7.2= 2.7.3= 2.7.4= 2.7.5= 2.7.6= 2.7.7= 2.9.0≤ 2.9.0 |
Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free