DEBIAN-CVE-2012-5134

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2012-5134
Downstream
DSA-2580-1
Published: 28 Nov 2012, 01:55
Last modified:28 Apr 2026, 20:12

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Nov 2012, 01:55
Published
Vulnerability first disclosed
28 Apr 2026, 20:12
Last Modified
Vulnerability information updated

Description

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.

Affected Systems

  • debian•libxml2

    < 2.8.0+dfsg1-7 | < 2.8.0+dfsg1-7 | < 2.8.0+dfsg1-7 | < 2.8.0+dfsg1-7

References (1)