CVE-2012-5134: Buffer Overflow

Published Nov 27, 2012
·
Updated

A heap-buffer overflow was found in the way libxml2 decoded certain XML entitites. A remote attacker could provide a specially-crafted XML file, which once opened in an application linked against libxml would cause that application to crash, or, potentially, execute arbitrary code with the privileges of the user running the application.

Reference: http://googlechromereleases.blogspot.in/2012/11/stable-channel-update.html

Patch: http://git.gnome.org/browse/libxml2/commit/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d

Other sources

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.

— MITRE

Affected Software

226 affected components
Google Chrome<=23.0.1271.89
Google Chrome=23.0.1271.0
Google Chrome=23.0.1271.1
Google Chrome=23.0.1271.2
Google Chrome=23.0.1271.3
Google Chrome=23.0.1271.4
Google Chrome=23.0.1271.5
Google Chrome=23.0.1271.6
Google Chrome=23.0.1271.7
Google Chrome=23.0.1271.8
Google Chrome=23.0.1271.10
Google Chrome=23.0.1271.11
Google Chrome=23.0.1271.12
Google Chrome=23.0.1271.13
Google Chrome=23.0.1271.14
Google Chrome=23.0.1271.15
Google Chrome=23.0.1271.16
Google Chrome=23.0.1271.17
Google Chrome=23.0.1271.18
Google Chrome=23.0.1271.19
Google Chrome=23.0.1271.20
Google Chrome=23.0.1271.21
Google Chrome=23.0.1271.22
Google Chrome=23.0.1271.23
Google Chrome=23.0.1271.24
Google Chrome=23.0.1271.26
Google Chrome=23.0.1271.30
Google Chrome=23.0.1271.31
Google Chrome=23.0.1271.32
Google Chrome=23.0.1271.33
Google Chrome=23.0.1271.35
Google Chrome=23.0.1271.36
Google Chrome=23.0.1271.37
Google Chrome=23.0.1271.38
Google Chrome=23.0.1271.39
Google Chrome=23.0.1271.40
Google Chrome=23.0.1271.41
Google Chrome=23.0.1271.44
Google Chrome=23.0.1271.45
Google Chrome=23.0.1271.46
Google Chrome=23.0.1271.49
Google Chrome=23.0.1271.50
Google Chrome=23.0.1271.51
Google Chrome=23.0.1271.52
Google Chrome=23.0.1271.53
Google Chrome=23.0.1271.54
Google Chrome=23.0.1271.55
Google Chrome=23.0.1271.56
Google Chrome=23.0.1271.57
Google Chrome=23.0.1271.58
Google Chrome=23.0.1271.60
Google Chrome=23.0.1271.61
Google Chrome=23.0.1271.62
Google Chrome=23.0.1271.64
Google Chrome=23.0.1271.83
Google Chrome=23.0.1271.84
Google Chrome=23.0.1271.85
Google Chrome=23.0.1271.86
Google Chrome=23.0.1271.87
Google Chrome=23.0.1271.88
XMLSoft Libxml2<=2.9.0
XMLSoft Libxml2=1.7.0
XMLSoft Libxml2=1.7.1
XMLSoft Libxml2=1.7.2
XMLSoft Libxml2=1.7.3
XMLSoft Libxml2=1.7.4
XMLSoft Libxml2=1.8.0
XMLSoft Libxml2=1.8.1
XMLSoft Libxml2=1.8.2
XMLSoft Libxml2=1.8.3
XMLSoft Libxml2=1.8.4
XMLSoft Libxml2=1.8.5
XMLSoft Libxml2=1.8.6
XMLSoft Libxml2=1.8.7
XMLSoft Libxml2=1.8.9
XMLSoft Libxml2=1.8.10
XMLSoft Libxml2=1.8.13
XMLSoft Libxml2=1.8.14
XMLSoft Libxml2=1.8.16
XMLSoft Libxml2=2.0.0
XMLSoft Libxml2=2.1.0
XMLSoft Libxml2=2.1.1
XMLSoft Libxml2=2.2.0
XMLSoft Libxml2=2.2.0-beta
XMLSoft Libxml2=2.2.1
XMLSoft Libxml2=2.2.2
XMLSoft Libxml2=2.2.3
XMLSoft Libxml2=2.2.4
XMLSoft Libxml2=2.2.5
XMLSoft Libxml2=2.2.6
XMLSoft Libxml2=2.2.7
XMLSoft Libxml2=2.2.8
XMLSoft Libxml2=2.2.9
XMLSoft Libxml2=2.2.10
XMLSoft Libxml2=2.2.11
XMLSoft Libxml2=2.3.0
XMLSoft Libxml2=2.3.1
XMLSoft Libxml2=2.3.2
XMLSoft Libxml2=2.3.3
XMLSoft Libxml2=2.3.4
XMLSoft Libxml2=2.3.5
XMLSoft Libxml2=2.3.6
XMLSoft Libxml2=2.3.7
XMLSoft Libxml2=2.3.8
XMLSoft Libxml2=2.3.9
XMLSoft Libxml2=2.3.10
XMLSoft Libxml2=2.3.11
XMLSoft Libxml2=2.3.12
XMLSoft Libxml2=2.3.13
XMLSoft Libxml2=2.3.14
XMLSoft Libxml2=2.4.1
XMLSoft Libxml2=2.4.2
XMLSoft Libxml2=2.4.3
XMLSoft Libxml2=2.4.4
XMLSoft Libxml2=2.4.5
XMLSoft Libxml2=2.4.6
XMLSoft Libxml2=2.4.7
XMLSoft Libxml2=2.4.8
XMLSoft Libxml2=2.4.9
XMLSoft Libxml2=2.4.10
XMLSoft Libxml2=2.4.11
XMLSoft Libxml2=2.4.12
XMLSoft Libxml2=2.4.13
XMLSoft Libxml2=2.4.14
XMLSoft Libxml2=2.4.15
XMLSoft Libxml2=2.4.16
XMLSoft Libxml2=2.4.17
XMLSoft Libxml2=2.4.18
XMLSoft Libxml2=2.4.19
XMLSoft Libxml2=2.4.20
XMLSoft Libxml2=2.4.21
XMLSoft Libxml2=2.4.22
XMLSoft Libxml2=2.4.23
XMLSoft Libxml2=2.4.24
XMLSoft Libxml2=2.4.25
XMLSoft Libxml2=2.4.26
XMLSoft Libxml2=2.4.27
XMLSoft Libxml2=2.4.28
XMLSoft Libxml2=2.4.29
XMLSoft Libxml2=2.4.30
XMLSoft Libxml2=2.5.0
XMLSoft Libxml2=2.5.4
XMLSoft Libxml2=2.5.7
XMLSoft Libxml2=2.5.8
XMLSoft Libxml2=2.5.10
XMLSoft Libxml2=2.5.11
XMLSoft Libxml2=2.6.0
XMLSoft Libxml2=2.6.1
XMLSoft Libxml2=2.6.2
XMLSoft Libxml2=2.6.3
XMLSoft Libxml2=2.6.4
XMLSoft Libxml2=2.6.5
XMLSoft Libxml2=2.6.6
XMLSoft Libxml2=2.6.7
XMLSoft Libxml2=2.6.8
XMLSoft Libxml2=2.6.9
XMLSoft Libxml2=2.6.11
XMLSoft Libxml2=2.6.12
XMLSoft Libxml2=2.6.13
XMLSoft Libxml2=2.6.14
XMLSoft Libxml2=2.6.16
XMLSoft Libxml2=2.6.17
XMLSoft Libxml2=2.6.18
XMLSoft Libxml2=2.6.20
XMLSoft Libxml2=2.6.22
XMLSoft Libxml2=2.6.26
XMLSoft Libxml2=2.6.27
XMLSoft Libxml2=2.6.30
XMLSoft Libxml2=2.6.32
XMLSoft Libxml2=2.7.0
XMLSoft Libxml2=2.7.1
XMLSoft Libxml2=2.7.2
XMLSoft Libxml2=2.7.3
XMLSoft Libxml2=2.7.4
XMLSoft Libxml2=2.7.5
XMLSoft Libxml2=2.7.6
XMLSoft Libxml2=2.7.7
XMLSoft Libxml2=2.9.0-rc1
Apple iPhone OS<=6.1.4
Apple iPhone OS=1.0.0
Apple iPhone OS=1.0.1
Apple iPhone OS=1.0.2
Apple iPhone OS=1.1.0
Apple iPhone OS=1.1.1
Apple iPhone OS=1.1.2
Apple iPhone OS=1.1.3
Apple iPhone OS=1.1.4
Apple iPhone OS=1.1.5
Apple iPhone OS=2.0
Apple iPhone OS=2.0.0
Apple iPhone OS=2.0.1
Apple iPhone OS=2.0.2
Apple iPhone OS=2.1
Apple iPhone OS=2.1.1
Apple iPhone OS=2.2
Apple iPhone OS=2.2.1
Apple iPhone OS=3.0
Apple iPhone OS=3.0.1
Apple iPhone OS=3.1
Apple iPhone OS=3.1.2
Apple iPhone OS=3.1.3
Apple iPhone OS=3.2
Apple iPhone OS=3.2.1
Apple iPhone OS=3.2.2
Apple iPhone OS=4.0
Apple iPhone OS=4.0.1
Apple iPhone OS=4.0.2
Apple iPhone OS=4.1
Apple iPhone OS=4.2.1
Apple iPhone OS=4.2.5
Apple iPhone OS=4.2.8
Apple iPhone OS=4.3.0
Apple iPhone OS=4.3.1
Apple iPhone OS=4.3.2
Apple iPhone OS=4.3.3
Apple iPhone OS=4.3.5
Apple iPhone OS=5.0
Apple iPhone OS=5.0.1
Apple iPhone OS=5.1
Apple iPhone OS=5.1.1
Apple iPhone OS=6.0
Apple iPhone OS=6.0.1
Apple iPhone OS=6.0.2
Apple iPhone OS=6.1
Apple iPhone OS=6.1.2
Apple iPhone OS=6.1.3

Remediation

Patch Available

http://git.gnome.org/browse/libxml2/commit/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d

Event History

Nov 27, 2012
Data Sourced
04:18 AM
DescriptionSeverityAffected Software
Nov 28, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2012-5134?

CVE-2012-5134 has a severity rating that allows remote attackers to cause a denial of service or potentially execute arbitrary code.

2

How do I fix CVE-2012-5134?

To fix CVE-2012-5134, update your affected software to the latest versions of Google Chrome or libxml2, which include patches.

3

Which versions of Google Chrome are affected by CVE-2012-5134?

CVE-2012-5134 affects Google Chrome versions prior to 23.0.1271.91.

4

Is libxml2 vulnerable to CVE-2012-5134?

Yes, libxml2 versions up to and including 2.9.0 are vulnerable to CVE-2012-5134.

5

What specific function is responsible for the vulnerability in CVE-2012-5134?

The vulnerability in CVE-2012-5134 is caused by a heap-based buffer underflow in the xmlParseAttValueComplex function.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203