Not rated
CVE-2017-15412 Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a…
Description
Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome prior to 63.0.3239.84 unknown | Versions not published |
References
- 1040348 www.securitytracker.com
- crbug.com crbug.com
- bugzilla.gnome.org bugzilla.gnome.org
- DSA-4086 www.debian.org
- RHSA-2018:0287 access.redhat.com
- [debian-lts-announce] 20171218 [SECURITY] [DLA 1211-1] libxml2 security update lists.debian.org
- RHSA-2017:3401 access.redhat.com
- GLSA-201801-03 security.gentoo.org
- chromereleases.googleblog.com chromereleases.googleblog.com
Timeline
- Published
- Last modified
Other CVEs of Google Chrome prior to 63.0.3239.84 unknown
The 18 CVEs of Google Chrome prior to 63.0.3239.84 unknown →
CVE-2017-15413
Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially…
Not rated
CVE-2017-15426
Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform…
Not rated
CVE-2017-15425
Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform…
Not rated
CVE-2017-15415
Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a…
Not rated