CVE-2013-2877: Buffer Overflow
Published Jul 10, 2013
·Updated
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XMLPARSEREOF state.
Affected Software
189 affected components
Google Chrome<=28.0.1500.70
Google Chrome=28.0.1500.0
Google Chrome=28.0.1500.2
Google Chrome=28.0.1500.3
Google Chrome=28.0.1500.4
Google Chrome=28.0.1500.5
Google Chrome=28.0.1500.6
Google Chrome=28.0.1500.8
Google Chrome=28.0.1500.9
Google Chrome=28.0.1500.10
Google Chrome=28.0.1500.11
Google Chrome=28.0.1500.12
Google Chrome=28.0.1500.13
Google Chrome=28.0.1500.14
Google Chrome=28.0.1500.15
Google Chrome=28.0.1500.16
Google Chrome=28.0.1500.17
Google Chrome=28.0.1500.18
Google Chrome=28.0.1500.19
Google Chrome=28.0.1500.20
Google Chrome=28.0.1500.21
Google Chrome=28.0.1500.22
Google Chrome=28.0.1500.23
Google Chrome=28.0.1500.24
Google Chrome=28.0.1500.25
Google Chrome=28.0.1500.26
Google Chrome=28.0.1500.27
Google Chrome=28.0.1500.28
Google Chrome=28.0.1500.29
Google Chrome=28.0.1500.31
Google Chrome=28.0.1500.32
Google Chrome=28.0.1500.33
Google Chrome=28.0.1500.34
Google Chrome=28.0.1500.35
Google Chrome=28.0.1500.36
Google Chrome=28.0.1500.37
Google Chrome=28.0.1500.38
Google Chrome=28.0.1500.39
Google Chrome=28.0.1500.40
Google Chrome=28.0.1500.41
Google Chrome=28.0.1500.42
Google Chrome=28.0.1500.43
Google Chrome=28.0.1500.44
Google Chrome=28.0.1500.45
Google Chrome=28.0.1500.46
Google Chrome=28.0.1500.47
Google Chrome=28.0.1500.48
Google Chrome=28.0.1500.49
Google Chrome=28.0.1500.50
Google Chrome=28.0.1500.51
Google Chrome=28.0.1500.52
Google Chrome=28.0.1500.53
Google Chrome=28.0.1500.54
Google Chrome=28.0.1500.56
Google Chrome=28.0.1500.58
Google Chrome=28.0.1500.59
Google Chrome=28.0.1500.60
Google Chrome=28.0.1500.61
Google Chrome=28.0.1500.62
Google Chrome=28.0.1500.63
Google Chrome=28.0.1500.64
Google Chrome=28.0.1500.66
Google Chrome=28.0.1500.68
XMLSoft Libxml2<=2.9.0
XMLSoft Libxml2=1.7.0
XMLSoft Libxml2=1.7.1
XMLSoft Libxml2=1.7.2
XMLSoft Libxml2=1.7.3
XMLSoft Libxml2=1.7.4
XMLSoft Libxml2=1.8.0
XMLSoft Libxml2=1.8.1
XMLSoft Libxml2=1.8.2
XMLSoft Libxml2=1.8.3
XMLSoft Libxml2=1.8.4
XMLSoft Libxml2=1.8.5
XMLSoft Libxml2=1.8.6
XMLSoft Libxml2=1.8.7
XMLSoft Libxml2=1.8.9
XMLSoft Libxml2=1.8.10
XMLSoft Libxml2=1.8.13
XMLSoft Libxml2=1.8.14
XMLSoft Libxml2=1.8.16
XMLSoft Libxml2=2.0.0
XMLSoft Libxml2=2.1.0
XMLSoft Libxml2=2.1.1
XMLSoft Libxml2=2.2.0
XMLSoft Libxml2=2.2.0-beta
XMLSoft Libxml2=2.2.1
XMLSoft Libxml2=2.2.2
XMLSoft Libxml2=2.2.3
XMLSoft Libxml2=2.2.4
XMLSoft Libxml2=2.2.5
XMLSoft Libxml2=2.2.6
XMLSoft Libxml2=2.2.7
XMLSoft Libxml2=2.2.8
XMLSoft Libxml2=2.2.9
XMLSoft Libxml2=2.2.10
XMLSoft Libxml2=2.2.11
XMLSoft Libxml2=2.3.0
XMLSoft Libxml2=2.3.1
XMLSoft Libxml2=2.3.2
XMLSoft Libxml2=2.3.3
XMLSoft Libxml2=2.3.4
XMLSoft Libxml2=2.3.5
XMLSoft Libxml2=2.3.6
XMLSoft Libxml2=2.3.7
XMLSoft Libxml2=2.3.8
XMLSoft Libxml2=2.3.9
XMLSoft Libxml2=2.3.10
XMLSoft Libxml2=2.3.11
XMLSoft Libxml2=2.3.12
XMLSoft Libxml2=2.3.13
XMLSoft Libxml2=2.3.14
XMLSoft Libxml2=2.4.1
XMLSoft Libxml2=2.4.2
XMLSoft Libxml2=2.4.3
XMLSoft Libxml2=2.4.4
XMLSoft Libxml2=2.4.5
XMLSoft Libxml2=2.4.6
XMLSoft Libxml2=2.4.7
XMLSoft Libxml2=2.4.8
XMLSoft Libxml2=2.4.9
XMLSoft Libxml2=2.4.10
XMLSoft Libxml2=2.4.11
XMLSoft Libxml2=2.4.12
XMLSoft Libxml2=2.4.13
XMLSoft Libxml2=2.4.14
XMLSoft Libxml2=2.4.15
XMLSoft Libxml2=2.4.16
XMLSoft Libxml2=2.4.17
XMLSoft Libxml2=2.4.18
XMLSoft Libxml2=2.4.19
XMLSoft Libxml2=2.4.20
XMLSoft Libxml2=2.4.21
XMLSoft Libxml2=2.4.22
XMLSoft Libxml2=2.4.23
XMLSoft Libxml2=2.4.24
XMLSoft Libxml2=2.4.25
XMLSoft Libxml2=2.4.26
XMLSoft Libxml2=2.4.27
XMLSoft Libxml2=2.4.28
XMLSoft Libxml2=2.4.29
XMLSoft Libxml2=2.4.30
XMLSoft Libxml2=2.5.0
XMLSoft Libxml2=2.5.4
XMLSoft Libxml2=2.5.7
XMLSoft Libxml2=2.5.8
XMLSoft Libxml2=2.5.10
XMLSoft Libxml2=2.5.11
XMLSoft Libxml2=2.6.0
XMLSoft Libxml2=2.6.1
XMLSoft Libxml2=2.6.2
XMLSoft Libxml2=2.6.3
XMLSoft Libxml2=2.6.4
XMLSoft Libxml2=2.6.5
XMLSoft Libxml2=2.6.6
XMLSoft Libxml2=2.6.7
XMLSoft Libxml2=2.6.8
XMLSoft Libxml2=2.6.9
XMLSoft Libxml2=2.6.11
XMLSoft Libxml2=2.6.12
XMLSoft Libxml2=2.6.13
XMLSoft Libxml2=2.6.14
XMLSoft Libxml2=2.6.16
XMLSoft Libxml2=2.6.17
XMLSoft Libxml2=2.6.18
XMLSoft Libxml2=2.6.20
XMLSoft Libxml2=2.6.21
XMLSoft Libxml2=2.6.22
XMLSoft Libxml2=2.6.23
XMLSoft Libxml2=2.6.24
XMLSoft Libxml2=2.6.25
XMLSoft Libxml2=2.6.26
XMLSoft Libxml2=2.6.27
XMLSoft Libxml2=2.6.28
XMLSoft Libxml2=2.6.29
XMLSoft Libxml2=2.6.30
XMLSoft Libxml2=2.6.31
XMLSoft Libxml2=2.6.32
XMLSoft Libxml2=2.7.0
XMLSoft Libxml2=2.7.1
XMLSoft Libxml2=2.7.2
XMLSoft Libxml2=2.7.3
XMLSoft Libxml2=2.7.4
XMLSoft Libxml2=2.7.5
XMLSoft Libxml2=2.7.6
XMLSoft Libxml2=2.7.7
XMLSoft Libxml2=2.7.8
XMLSoft Libxml2=2.8.0
Remediation
Patch Available
Event History
Jul 10, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2877?
CVE-2013-2877 is classified as a denial of service vulnerability due to out-of-bounds read issues.
2
How do I fix CVE-2013-2877?
To mitigate CVE-2013-2877, it is essential to update libxml2 to version 2.9.0 or later.
3
What software is affected by CVE-2013-2877?
CVE-2013-2877 affects libxml2 versions prior to 2.9.0 and Google Chrome versions before 28.0.1500.71.
4
What kind of attack does CVE-2013-2877 enable?
CVE-2013-2877 allows remote attackers to cause a denial of service through specially crafted XML documents.
5
Is there a specific version of libxml2 that resolves CVE-2013-2877?
Yes, libxml2 version 2.9.0 or later addresses the vulnerability described in CVE-2013-2877.