CVE-2013-1969: Buffer Overflow
Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecldone functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1969?
CVE-2013-1969 is considered a high severity vulnerability as it can lead to denial of service and potentially allow arbitrary code execution.
How do I fix CVE-2013-1969?
To fix CVE-2013-1969, update libxml2 to version 2.9.1 or later where the vulnerabilities have been addressed.
What vulnerabilities are associated with CVE-2013-1969?
CVE-2013-1969 includes multiple use-after-free vulnerabilities in the htmlParseChunk and xmldecl_done functions.
Can CVE-2013-1969 be exploited remotely?
Yes, context-dependent attackers may exploit CVE-2013-1969 remotely, potentially leading to a system crash or code execution.
Which versions of libxml2 are affected by CVE-2013-1969?
Libxml2 version 2.9.0 is specifically affected by CVE-2013-1969, along with possibly other versions.