NVD

Id
44563  
Name
CVE-2012-2871  
Description
libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-31  
Modified Date
2014-01-27  
Seq
2012-2871  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
223749 44563 CVE-2012-2871 http://code.google.com/p/chromium/issues/detail?id=138673  View
223750 44563 CVE-2012-2871 http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html  View
223751 44563 CVE-2012-2871 APPLE-SA-2013-10-22-8  View
223752 44563 CVE-2012-2871 APPLE-SA-2013-09-18-2  View
223753 44563 CVE-2012-2871 openSUSE-SU-2012:1215  View
223754 44563 CVE-2012-2871 http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?r1=56276&r2=149930  View
223755 44563 CVE-2012-2871 http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?view=log  View
223756 44563 CVE-2012-2871 http://support.apple.com/kb/HT5934  View
223757 44563 CVE-2012-2871 http://support.apple.com/kb/HT6001  View
223758 44563 CVE-2012-2871 DSA-2555  View
223759 44563 CVE-2012-2871 MDVSA-2012:164  View
223760 44563 CVE-2012-2871 chrome-xsl-transforms-code-exec(78179)  View
223761 44563 CVE-2012-2871 https://chromiumcodereview.appspot.com/10824157  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28321 JVNDB-2012-004028 Google Chrome で使用される libxml2 におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome で使用される libxml2 は、XSL 変換処理の間、不特定の変数のキャストを適切にサポートしないため、サービス運用妨害 (DoS) 状態となるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2012-2871 56109 CVE-2012-2871 44563 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004028.html 2012-08-30 2014-02-03 View