mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-24 07:34:01 +02:00
0xMarcio
19 lines
790 B
Markdown
19 lines
790 B
Markdown
### [CVE-2015-8806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8806)
|
|
|
|
|
|
|
|
|
|
### Description
|
|
|
|
dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- http://www.openwall.com/lists/oss-security/2016/02/03/5
|
|
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
|
|
|
|
#### Github
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
|