Home > Vulnerability Database > CVE-2012-5134

Mend.io Vulnerability Database

CVE-2012-5134

Good to know:

Date: November 27, 2012

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.

Language: C

Severity Score

5.6

Related Resources (27)

Url: http://www.securitytracker.com/id?1027815

Url: http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html

Url: http://www.debian.org/security/2012/dsa-2580

Url: https://access.redhat.com/security/cve/CVE-2012-5134

Url: http://support.apple.com/kb/HT6001

Url: http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2012-5134

Url: http://www.ubuntu.com/usn/USN-1656-1

Url: http://secunia.com/advisories/54886

Url: http://support.apple.com/kb/HT5934

Url: https://nvd.nist.gov/vuln/detail/CVE-2012-5134

Url: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Url: http://git.gnome.org/browse/libxml2/commit/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d

Url: http://rhn.redhat.com/errata/RHSA-2012-1512.html

Url: https://code.google.com/p/chromium/issues/detail?id=158249

Url: http://rhn.redhat.com/errata/RHSA-2013-0217.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=880466

Url: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00023.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2013:056

Url: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Url: https://security-tracker.debian.org/tracker/CVE-2012-5134

Url: http://secunia.com/advisories/55568

Url: http://www.securityfocus.com/bid/56684

Url: http://secunia.com/advisories/51448

Url: http://googlechromereleases.blogspot.com/2012/11/stable-channel-update.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/80294

Url: https://www.mend.io/vulnerability-database/CVE-2012-5134

Severity Score

5.6

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2012-5134

Good to know:

Date: November 27, 2012

Language: C

Severity Score

Related Resources (27)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?