NVD

Id
38094  
Name
CVE-2013-1969  
Description
Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-04-25  
Modified Date
2013-06-20  
Seq
2013-1969  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194726 38094 CVE-2013-1969 openSUSE-SU-2013:0729  View
194727 38094 CVE-2013-1969 openSUSE-SU-2013:0945  View
194728 38094 CVE-2013-1969 [oss-security] 20130417 CVE request : libxml2 Multiple Use-After-Free Vulnerabilities  View
194729 38094 CVE-2013-1969 [oss-security] 20130418 Re: CVE request : libxml2 Multiple Use-After-Free Vulnerabilities  View
194730 38094 CVE-2013-1969 USN-1817-1  View
194731 38094 CVE-2013-1969 https://bugzilla.gnome.org/show_bug.cgi?id=690202  View
194732 38094 CVE-2013-1969 https://git.gnome.org/browse/libxml2/commit/?id=de0cc20c29cb3f056062925395e0f68d2250a46f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20905 JVNDB-2013-002480 libxml2 におけるサービス運用妨害 (DoS) の脆弱性 libxml2 には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (クラッシュ) 状態になる、および任意のコードを実行される脆弱性が存在します。 CVE-2013-1969 61911 CVE-2013-1969 38094 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002480.html 2013-02-12 2014-08-11 View