High · published July 23, 2016
Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
| Product | Versions | Fixed in |
|---|---|---|
| google/chrome | < 52.0.2743.82 | 52.0.2743.82 |
| xmlsoft/libxml2 | ≤ 2.9.4 | — |
| apple/iphone_os | < 10.0 | 10.0 |
| apple/mac_os_x | < 10.12 | 10.12 |
| apple/tvos | < 10.0 | 10.0 |
| apple/watchos | < 3.0 | 3.0 |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| opensuse/leap | all versions | — |
| opensuse/opensuse | all versions | — |
| opensuse/opensuse | all versions | — |
| suse/linux_enterprise | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |