Back to search
CVE-2016-1833
Published: May 20, 2016
Modified: Aug 5, 2024
PUBLISHED
Description
The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://kc.mcafee.com/corporate/index?page=content&id=SB10170
x_refsource_CONFIRM
RHSA-2016:1292
vendor-advisory
x_refsource_REDHAT
https://support.apple.com/HT206567
x_refsource_CONFIRM
90691
vdb-entry
x_refsource_BID
DSA-3593
vendor-advisory
x_refsource_DEBIAN
https://bugs.chromium.org/p/project-zero/issues/detail?id=636
x_refsource_MISC
http://xmlsoft.org/news.html
x_refsource_CONFIRM
APPLE-SA-2016-05-16-4
vendor-advisory
x_refsource_APPLE
USN-2994-1
vendor-advisory
x_refsource_UBUNTU
https://support.apple.com/HT206566
x_refsource_CONFIRM
https://bugzilla.gnome.org/show_bug.cgi?id=758606
x_refsource_CONFIRM
https://www.tenable.com/security/tns-2016-18
x_refsource_CONFIRM
APPLE-SA-2016-05-16-3
vendor-advisory
x_refsource_APPLE
https://support.apple.com/HT206564
x_refsource_CONFIRM
RHSA-2016:2957
vendor-advisory
x_refsource_REDHAT
1035890
vdb-entry
x_refsource_SECTRACK
APPLE-SA-2016-05-16-2
vendor-advisory
x_refsource_APPLE
https://support.apple.com/HT206568
x_refsource_CONFIRM
APPLE-SA-2016-05-16-1
vendor-advisory
x_refsource_APPLE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now