Multiple integer overflow vulnerability in libxml2

Release date:
Updated on:

Affected Systems:
XMLSoft Libxml2 2.x
Google Chrome <20170.1132.43
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54718
Cve id: CVE-2012-2807

The libxml package provides a function library that allows users to manipulate XML files, including reading, modifying, and writing XML and HTML files.

On a 64-bit Linux platform, multiple integer overflow vulnerabilities exist in libxml2 used in Google Chrome versions earlier than 0.1132.43, allowing remote attackers to cause denial of service or other unknown details.

<* Source: Jueri Aedla

Link: https://bugzilla.redhat.com/show_bug.cgi? CVE-2012-2807
Http://packetstormsecurity.org/files/cve/CVE-2012-2807
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

XMLSoft
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.xmlsoft.org/