mirror of
https://github.com/0xMarcio/cve.git
synced 2026-02-12 22:53:11 +00:00
20 lines
856 B
Markdown
20 lines
856 B
Markdown
### [CVE-2012-5134](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
No PoCs from references.
|
|
|
|
#### Github
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/yuntongzhang/senx-experiments
|
|
- https://github.com/yuntongzhang/vulnfix
|
|
|