8.8
High
CVE-2017-5130 An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other…
Description
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome prior to 62.0.3202.62 | Versions not published |
References
- 101482 www.securityfocus.com
- [debian-lts-announce] 20171123 [SECURITY] [DLA 1188-1] libxml2 security update lists.debian.org
- bugzilla.gnome.org bugzilla.gnome.org
- chromereleases.googleblog.com chromereleases.googleblog.com
- git.gnome.org git.gnome.org
- RHSA-2017:2997 access.redhat.com
- crbug.com crbug.com
- GLSA-201710-24 security.gentoo.org
- security.netapp.com security.netapp.com
- www.oracle.com www.oracle.com
- [debian-lts-announce] 20220408 [SECURITY] [DLA 2972-1] libxml2 security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of Google Chrome prior to 62.0.3202.62
The 20 CVEs of Google Chrome prior to 62.0.3202.62 →
CVE-2017-5124
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to…
Not rated
CVE-2017-5126
A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit…
Not rated
CVE-2017-5125
Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit…
Not rated
CVE-2017-5127
Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap…
Not rated