Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Upgrade to Apple Safari version 5.0.6Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 5.1 | Jan 5, 2012 | Jul 21, 2011 |
| Centos_linux | — | Upgrade libxml2-pythonUpgrade mingw32-libxml2-staticUpgrade mingw32-libxml2Upgrade libxml2-develUpgrade libxml2 | Dec 1, 2016 | Jul 21, 2011 |
| Debian | — | Upgrade libxml2 | Jul 30, 2024 | Jul 21, 2011 |
| Oracle Solaris | — | Upgrade libxml2 to version 2.7.6-0.175.0.10.0.4.0 on Solaris 11.0 | May 29, 2017 | Jul 21, 2011 |
| Oracle_linux | — | Upgrade mingw32-libxml2Upgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade mingw32-libxml2-staticUpgrade libxml2-devel | Oct 16, 2024 | Jul 21, 2011 |
| Ubuntu | — | Upgrade libxml2 | Nov 8, 2024 | Jul 21, 2011 |
| Vmsa 2012 0008 | — | Upgrade VMware ESX 4.1 to build number 659051 | Aug 17, 2012 | Jul 21, 2011 |
| Vmsa 2012 0012 | — | Upgrade VMware ESXi 4.1 to build number 800380Upgrade VMware ESXi 4.0 to build number 787047Upgrade VMware ESXi 5.0 to build number 764879 | Jul 18, 2012 | Jul 21, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub