NVD

Id
28772  
Name
CVE-2015-8710  
Description
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-11-29  
Seq
2015-8710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151421 28772 CVE-2015-8710 RHSA-2016:1089  View
151422 28772 CVE-2015-8710 DSA-3430  View
151423 28772 CVE-2015-8710 [oss-security] 20150419 libxml2 issue: out-of-bounds memory access when parsing an unclosed HTML comment  View
151424 28772 CVE-2015-8710 [oss-security] 20150913 Re: libxml2 issue: out-of-bounds memory access when parsing an unclosed HTML comment  View
151425 28772 CVE-2015-8710 [oss-security] 20151231 Re: libxml2 issue: out-of-bounds memory access when parsing an unclosed HTML comment  View
151426 28772 CVE-2015-8710 79811  View
151427 28772 CVE-2015-8710 https://bugzilla.gnome.org/show_bug.cgi?id=746048  View
151428 28772 CVE-2015-8710 https://git.gnome.org/browse/libxml2/commit/?id=e724879d964d774df9b7969fc846605aa1bac54c  View
151429 28772 CVE-2015-8710 https://hackerone.com/reports/57125#activity-384861  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11741 JVNDB-2015-007061 libxml2 の HTMLparser.c の htmlParseComment 関数における重要な情報を取得される脆弱性 libxml2 の HTMLparser.c の htmlParseComment 関数には、重要な情報を取得される、またはサービス運用妨害 (ヒープメモリの領域外へのアクセスおよびアプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-8710 85935 CVE-2015-8710 28772 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007061.html 2015-03-11 2016-04-20 View