Xmlsoft Libxml2 2.6.6

This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Summuary
CPE Name	cpe:/a:xmlsoft:libxml2:2.6.6

Detail
Vendor	Xmlsoft	First view	2005-03-01
Product	libxml2	Last view	2014-01-21
Version	2.6.6	Type	Application
Edition
Language
Update

CPE Product	cpe:/a:xmlsoft:libxml2

Activity : Overall

Related : CVE

	Date	Alert	Access Vector	Access Complexity	Authentication
6.8	2014-01-21	CVE-2013-0339	Network	Medium	None Requ...
5	2013-07-10	CVE-2013-2877	Network	Low	None Requ...
4.3	2013-04-25	CVE-2013-0338	Network	Medium	None Requ...
5	2012-12-21	CVE-2012-0841	Network	Low	None Requ...
6.8	2012-11-27	CVE-2012-5134	Network	Medium	None Requ...
Hide \| Show 4 More...

	Date	Alert	Access Vector	Access Complexity	Authentication
9.3	2011-09-02	CVE-2011-1944	Network	Medium	None Requ...
4.3	2010-11-16	CVE-2010-4008	Network	Medium	None Requ...
10	2008-09-12	CVE-2008-3529	Network	Low	None Requ...
10	2005-03-01	CVE-2004-0989	Network	Low	None Requ...

CWE : Common Weakness Enumeration

%	id	Name
62% (5)	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
12% (1)	CWE-399	Resource Management Errors
12% (1)	CWE-264	Permissions, Privileges, and Access Controls
12% (1)	CWE-189	Numeric Errors

CAPEC : Common Attack Pattern Enumeration & Classification

id	Name
CAPEC-47	Buffer Overflow via Parameter Expansion

Oval Markup Language : Definitions

OvalID	Name
oval:org.mitre.oval:def:1173	Multiple Buffer Overflows in libXML2
oval:org.mitre.oval:def:10505	Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly...
oval:org.mitre.oval:def:6103	Libxml2 Heap Overflow in xmlParseAttValueComplex() Lets Remote Users Execute ...
oval:org.mitre.oval:def:11760	Heap-based buffer overflow in the xmlParseAttValueComplex function in parser....
oval:org.mitre.oval:def:21739	ELSA-2008:0884: libxml2 security update (Important)
Hide \| Show 15 More...

id	Name
oval:org.mitre.oval:def:12148	Vulnerability in libxml2 in Google Chrome before 7.0.517.44
oval:org.mitre.oval:def:20976	RHSA-2012:0324: libxml2 security update (Moderate)
oval:org.mitre.oval:def:20110	VMware vSphere and vCOps updates to third party libraries
oval:org.mitre.oval:def:23733	ELSA-2012:0324: libxml2 security update (Moderate)
oval:org.mitre.oval:def:23087	ELSA-2012:0324: libxml2 security update (Moderate)
oval:org.mitre.oval:def:21665	RHSA-2012:1512: libxml2 security update (Important)
oval:org.mitre.oval:def:20771	RHSA-2013:0217: mingw32-libxml2 security update (Important)
oval:org.mitre.oval:def:20411	VMware ESXi and ESX security update for third party library
oval:org.mitre.oval:def:23922	ELSA-2012:1512: libxml2 security update (Important)
oval:org.mitre.oval:def:23888	ELSA-2013:0217: mingw32-libxml2 security update (Important)
oval:org.mitre.oval:def:23439	ELSA-2012:1512: libxml2 security update (Important)
oval:org.mitre.oval:def:20894	RHSA-2013:0581: libxml2 security update (Moderate)
oval:org.mitre.oval:def:20491	VMware vSphere, ESX and ESXi updates to third party libraries
oval:org.mitre.oval:def:23965	ELSA-2013:0581: libxml2 security update (Moderate)
oval:org.mitre.oval:def:23449	ELSA-2013:0581: libxml2 security update (Moderate)

Open Source Vulnerability Database (OSVDB)

id	Description
73248	libxml2 xpath.c Xpath Nodeset Processing Overflow
69205	libxml2 Crafted XML File XPath Axis Traversal DoS
48158	libxml2 parser.c xmlParseAttValueComplex Function XML Entity Name Handling DoS
11324	libxml2 Proxy FTP URL Processing Overflow
11180	libxml2 DNS Reply Overflows
Hide \| Show 1 More...

id	Description
11179	libxml2 FTP URL Processing Overflow

Milw0rm Exploits

id	Description
2009-05-26	Safari RSS feed:// Buffer Overflow via libxml2 Exploit PoC

ExploitDB Exploits

id	Description
8798	Safari RSS feed:// Buffer Overflow via libxml2 Exploit PoC

OpenVAS Exploits

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.

id	Description
2012-12-14	Name : SuSE Update for Chromium openSUSE-SU-2012:1637-1 (Chromium) File : nvt/gb_suse_2012_1637_1.nasl
2012-12-06	Name : Ubuntu Update for libxml2 USN-1656-1 File : nvt/gb_ubuntu_USN_1656_1.nasl
2012-12-04	Name : RedHat Update for libxml2 RHSA-2012:1512-01 File : nvt/gb_RHSA-2012_1512-01_libxml2.nasl
2012-12-04	Name : Mandriva Update for libxml2 MDVSA-2012:176 (libxml2) File : nvt/gb_mandriva_MDVSA_2012_176.nasl
2012-12-04	Name : Debian Security Advisory DSA 2580-1 (libxml2) File : nvt/deb_2580_1.nasl
Hide \| Show 20 More...

id	Description
2012-12-04	Name : FreeBSD Ports: chromium File : nvt/freebsd_chromium24.nasl
2012-12-04	Name : CentOS Update for libxml2 CESA-2012:1512 centos5 File : nvt/gb_CESA-2012_1512_libxml2_centos5.nasl
2012-12-04	Name : CentOS Update for libxml2 CESA-2012:1512 centos6 File : nvt/gb_CESA-2012_1512_libxml2_centos6.nasl
2012-12-04	Name : Google Chrome Multiple Vulnerabilities-01 Dec2012 (Linux) File : nvt/gb_google_chrome_mult_vuln01_dec12_lin.nasl
2012-12-04	Name : Google Chrome Multiple Vulnerabilities-01 Dec2012 (Mac OS X) File : nvt/gb_google_chrome_mult_vuln01_dec12_macosx.nasl
2012-12-04	Name : Google Chrome Multiple Vulnerabilities-01 Dec2012 (Windows) File : nvt/gb_google_chrome_mult_vuln01_dec12_win.nasl
2012-10-03	Name : Fedora Update for libxml2 FEDORA-2012-13824 File : nvt/gb_fedora_2012_13824_libxml2_fc16.nasl
2012-09-27	Name : Fedora Update for libxml2 FEDORA-2012-13820 File : nvt/gb_fedora_2012_13820_libxml2_fc17.nasl
2012-08-31	Name : VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries. File : nvt/gb_VMSA-2012-0013.nasl
2012-07-30	Name : CentOS Update for libxml2 CESA-2012:0017 centos5 File : nvt/gb_CESA-2012_0017_libxml2_centos5.nasl
2012-07-30	Name : CentOS Update for libxml2 CESA-2012:0324 centos6 File : nvt/gb_CESA-2012_0324_libxml2_centos6.nasl
2012-07-13	Name : VMSA-2012-0012 VMware ESXi update addresses several security issues. File : nvt/gb_VMSA-2012-0012.nasl
2012-07-09	Name : RedHat Update for libxml2 RHSA-2011:1749-03 File : nvt/gb_RHSA-2011_1749-03_libxml2.nasl
2012-05-18	Name : Mac OS X Multiple Vulnerabilities (2012-002) File : nvt/gb_macosx_su12-002.nasl
2012-03-12	Name : Gentoo Security Advisory GLSA 201203-04 (libxml2) File : nvt/glsa_201203_04.nasl
2012-03-12	Name : Debian Security Advisory DSA 2417-1 (libxml2) File : nvt/deb_2417_1.nasl
2012-03-07	Name : Ubuntu Update for libxml2 USN-1376-1 File : nvt/gb_ubuntu_USN_1376_1.nasl
2012-02-27	Name : RedHat Update for libxml2 RHSA-2012:0324-01 File : nvt/gb_RHSA-2012_0324-01_libxml2.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-26 (libxml2) File : nvt/glsa_201110_26.nasl
2012-01-13	Name : RedHat Update for libxml2 RHSA-2012:0017-01 File : nvt/gb_RHSA-2012_0017-01_libxml2.nasl

Information Assurance Vulnerability Management (IAVM)

id	Description
2012-A-0153	Multiple Vulnerabilities in VMware ESX 4.0 and ESXi 4.0 Severity : Category I - VMSKEY : V0033884
2012-A-0148	Multiple Vulnerabilities in VMware ESXi 4.1 and ESX 4.1 Severity : Category I - VMSKEY : V0033794
2012-A-0073	Multiple Vulnerabilities in VMware ESXi 4.1 and ESX 4.1 Severity : Category I - VMSKEY : V0032171

Snort® IPS/IDS

Date	Description
2014-01-10	libxml2 file processing long entity overflow attempt RuleID : 15866 - Type : FILE-OTHER - Revision : 12

Nessus® Vulnerability Scanner

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.

id	Description
2014-01-29	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libxml2-140106.nasl - Type : ACT_GATHER_INFO
2014-01-23	Name : The remote host contains an application that has multiple vulnerabilities. File : itunes_11_1_4.nasl - Type : ACT_GATHER_INFO
2014-01-23	Name : The remote host contains an application with potentially multiple vulnerabili... File : itunes_11_1_4_banner.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote VMware ESXi 5.0 host is affected by a buffer underflow vulnerability. File : vmware_esxi_5_0_build_1022489_remote.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote VMware ESXi 5.0 host is affected by multiple security vulnerabilit... File : vmware_esxi_5_0_build_1311177_remote.nasl - Type : ACT_GATHER_INFO
Hide \| Show 20 More...

id	Description
2013-11-13	Name : The remote VMware ESXi 5.0 host is affected by multiple security vulnerabilit... File : vmware_esxi_5_0_build_764879_remote.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote VMware ESXi 5.1 host is affected by multiple security vulnerabilit... File : vmware_esxi_5_1_build_1063671_remote.nasl - Type : ACT_GATHER_INFO
2013-11-11	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201311-06.nasl - Type : ACT_GATHER_INFO
2013-10-24	Name : The remote host contains an application that has multiple vulnerabilities. File : itunes_11_1_2.nasl - Type : ACT_GATHER_INFO
2013-10-24	Name : The remote host contains an application with multiple vulnerabilities. File : itunes_11_1_2_banner.nasl - Type : ACT_GATHER_INFO
2013-10-15	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2779.nasl - Type : ACT_GATHER_INFO
2013-10-01	Name : The remote device is affected by multiple vulnerabilities. File : appletv_6_0.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201309-16.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-143.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-52.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-188.nasl - Type : ACT_GATHER_INFO
2013-08-02	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2013-0009.nasl - Type : ACT_GATHER_INFO
2013-07-25	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-198.nasl - Type : ACT_GATHER_INFO
2013-07-19	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2724.nasl - Type : ACT_GATHER_INFO
2013-07-18	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1904-2.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1904-1.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0324.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0581.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0884.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-1512.nasl - Type : ACT_GATHER_INFO

vDNA Monitoring

	no vDNA Monitoring
Monitor this version now !

Global informations

Mapping	Total
CVE ID(s)	9
CWE ID(s)	4
CAPEC ID(s)	1
OVALid	20
osvdb(s)	6
Milw0rm Exploit(s)	1
ExploitDB Exploit(s)	1
OpenVAS Exploit(s)	68
IAVM(s)	3
Snort® Rule(s)	1
Nessus® Exploit(s)	152

	%	Affected CVE
Critical (9-10)	33.33%	3
High (7-8.9)	0%	0
Medium (4-6.9)	66.67%	6
Low (0.1-3.9)	0%	0
Pending... (0)	0%	0

Xmlsoft Libxml2 2.6.6

Summary

Activity : Overall

Related : CVE

CWE : Common Weakness Enumeration

CAPEC : Common Attack Pattern Enumeration & Classification

Oval Markup Language : Definitions

Open Source Vulnerability Database (OSVDB)

Milw0rm Exploits

ExploitDB Exploits

OpenVAS Exploits

Information Assurance Vulnerability Management (IAVM)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

vDNA Monitoring

Global informations

Risk Rating (CVSS)

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU