mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 19:16:22 +00:00
21 lines
1009 B
Markdown
21 lines
1009 B
Markdown
|
### [CVE-2016-1838](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1838)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
|
||
|
|
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
|
||
|
|
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/ARPSyndicate/cvemon
|
||
|
|
- https://github.com/yuntongzhang/senx-experiments
|
||
|
|
|