| Package | Affected versions | Patched versions |
|---|---|---|
| itunes | = 12.4.1 | |
| icewall federation agent | = 3.0 | |
| web gateway | ≥ 7.5.0.0, ≤ 7.5.2.10≥ 7.6.0.0, ≤ 7.6.2.3 | |
| libxml2 | ≤ 2.9.3 |
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free