NVD

Id
28855  
Name
CVE-2015-8806  
Description
dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-09-22  
Seq
2015-8806  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151991 28855 CVE-2015-8806 [oss-security] 20160203 Re: Out-of-bounds Read in the libxml2"s htmlParseNameComplex() function  View
151992 28855 CVE-2015-8806 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
151993 28855 CVE-2015-8806 82071  View
151994 28855 CVE-2015-8806 USN-2994-1  View
151995 28855 CVE-2015-8806 https://bugzilla.gnome.org/show_bug.cgi?id=749115  View
151996 28855 CVE-2015-8806 DSA-3593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11735 JVNDB-2015-007055 libxml2 の dict.c におけるサービス運用妨害 (DoS) の脆弱性 libxml2 の dict.c には、サービス運用妨害 (ヒープベースのバッファオーバーリードおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-8806 86031 CVE-2015-8806 28855 5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007055.html 2015-05-08 2016-04-19 View