Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libxml | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Jul 16, 2012 | Aug 29, 2011 |
| Apple Osx Loginwindow | — | Apply OS X security update 2012-002Upgrade macOS to the latest version | Aug 28, 2015 | Aug 29, 2011 |
| Centos_linux | — | Upgrade mingw32-libxml2Upgrade mingw32-libxml2-static | Dec 1, 2016 | Aug 29, 2011 |
| Debian | — | Upgrade libxml2 | Jul 30, 2024 | Aug 29, 2011 |
| Gentoo Linux | — | Upgrade dev-libs/libxml2. | Oct 30, 2017 | Aug 29, 2011 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Mar 21, 2012 | Aug 29, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Aug 29, 2011 |
| Oracle Solaris | — | Upgrade libxml2 to version 2.7.6-0.175.0.10.0.4.0 on Solaris 11.0 | May 29, 2017 | Aug 29, 2011 |
| Oracle_linux | — | Upgrade libxml2Upgrade mingw32-libxml2Upgrade libxml2-pythonUpgrade mingw32-libxml2-staticUpgrade libxml2-staticUpgrade libxml2-devel | Oct 16, 2024 | Aug 29, 2011 |
| Suse | — | Upgrade libxml2-docUpgrade libxml2Upgrade libxml2-32bitUpgrade libxml2-x86Upgrade libxml2-develUpgrade libxml2-devel-32bit | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libxml2 | Nov 8, 2024 | Aug 29, 2011 |
| Vmsa 2012 0012 | — | Apply ESXi500-201207101-SG | Jul 18, 2012 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub