CVE-2015-8242

EPSS 0.97%
發布日:2015/12/15修改日:2026/4/28

描述

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

受影響套件(1)

參考連結(1)