CVE-2012-2871

iPhone OS < 6.1.4 - Denial of Service via libxml2 XSL Transform Handling

Title source: llm
STIX 2.1

Description

libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.

References (15)

Core 15
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50838
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2555
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6001
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/78179
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54886
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5934
Various Sources x_refsource_confirm
https://chromiumcodereview.appspot.com/10824157
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:164
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Scores

EPSS 0.0238
EPSS Percentile 82.1%

Details

Status published
Products (50)
apple/iphone_os 1.0.0
apple/iphone_os 1.0.1
apple/iphone_os 1.0.2
apple/iphone_os 1.1.0
apple/iphone_os 1.1.1
apple/iphone_os 1.1.2
apple/iphone_os 1.1.3
apple/iphone_os 1.1.4
apple/iphone_os 1.1.5
apple/iphone_os 2.0
... and 40 more
Published Aug 31, 2012
Tracked Since Feb 18, 2026