9.3

CVE-2011-1944

Exploit

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.

Data is provided by the National Vulnerability Database (NVD)
Xmlsoft ≫ Libxml2 Version2.6.0
Xmlsoft ≫ Libxml2 Version2.6.1
Xmlsoft ≫ Libxml2 Version2.6.2
Xmlsoft ≫ Libxml2 Version2.6.3
Xmlsoft ≫ Libxml2 Version2.6.4
Xmlsoft ≫ Libxml2 Version2.6.5
Xmlsoft ≫ Libxml2 Version2.6.6
Xmlsoft ≫ Libxml2 Version2.6.7
Xmlsoft ≫ Libxml2 Version2.6.8
Xmlsoft ≫ Libxml2 Version2.6.9
Xmlsoft ≫ Libxml2 Version2.6.11
Xmlsoft ≫ Libxml2 Version2.6.12
Xmlsoft ≫ Libxml2 Version2.6.13
Xmlsoft ≫ Libxml2 Version2.6.14
Xmlsoft ≫ Libxml2 Version2.6.16
Xmlsoft ≫ Libxml2 Version2.6.17
Xmlsoft ≫ Libxml2 Version2.6.18
Xmlsoft ≫ Libxml2 Version2.6.20
Xmlsoft ≫ Libxml2 Version2.6.22
Xmlsoft ≫ Libxml2 Version2.6.26
Xmlsoft ≫ Libxml2 Version2.6.27
Xmlsoft ≫ Libxml2 Version2.6.30
Xmlsoft ≫ Libxml2 Version2.6.32
Xmlsoft ≫ Libxml2 Version2.7.0
Xmlsoft ≫ Libxml2 Version2.7.1
Xmlsoft ≫ Libxml2 Version2.7.2
Xmlsoft ≫ Libxml2 Version2.7.3
Xmlsoft ≫ Libxml2 Version2.7.4
Xmlsoft ≫ Libxml2 Version2.7.5
Xmlsoft ≫ Libxml2 Version2.7.6
Xmlsoft ≫ Libxml2 Version2.7.7
Xmlsoft ≫ Libxml2 Version2.7.8
Xmlsoft ≫ Libxml Version <= 1.8.16
Xmlsoft ≫ Libxml Version1.5.0
Xmlsoft ≫ Libxml Version1.6.0
Xmlsoft ≫ Libxml Version1.6.1
Xmlsoft ≫ Libxml Version1.6.2
Xmlsoft ≫ Libxml Version1.7.0
Xmlsoft ≫ Libxml Version1.7.1
Xmlsoft ≫ Libxml Version1.7.2
Xmlsoft ≫ Libxml Version1.7.3
Xmlsoft ≫ Libxml Version1.7.4
Xmlsoft ≫ Libxml Version1.8.0
Xmlsoft ≫ Libxml Version1.8.1
Xmlsoft ≫ Libxml Version1.8.2
Xmlsoft ≫ Libxml Version1.8.3
Xmlsoft ≫ Libxml Version1.8.4
Xmlsoft ≫ Libxml Version1.8.5
Xmlsoft ≫ Libxml Version1.8.6
Xmlsoft ≫ Libxml Version1.8.7
Xmlsoft ≫ Libxml Version1.8.8
Xmlsoft ≫ Libxml Version1.8.9
Xmlsoft ≫ Libxml Version1.8.10
Xmlsoft ≫ Libxml Version1.8.11
Xmlsoft ≫ Libxml Version1.8.12
Xmlsoft ≫ Libxml Version1.8.13
Xmlsoft ≫ Libxml Version1.8.14
Xmlsoft ≫ Libxml Version1.8.15
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 17.55% 0.948
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C