CVE-2011-3102

Description

Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.

Scores

Faiblesses (CWE)

• CWE-189

Références européennes

• ENISA EUVD · EUVD-2011-3070
• GCVE · GCVE-0-2011-3102

Avis du CERT-FR

• CERTFR-2022-AVI-267 — Multiples vulnérabilités dans Juniper Networks Junos Space · cert.ssi.gouv.fr
• CERTFR-2014-AVI-041 — Multiples vulnérabilités dans Apple iTunes · cert.ssi.gouv.fr
• CERTA-2013-AVI-605 — Multiples vulnérabilités dans Apple iTunes · cert.ssi.gouv.fr
• CERTA-2013-AVI-541 — Multiples vulnérabilités dans Apple TV · cert.ssi.gouv.fr
• CERTA-2013-AVI-536 — Multiples vulnérabilités dans Apple iOS · cert.ssi.gouv.fr
• CERTA-2013-AVI-166 — Multiples vulnérabilités dans Xerox FreeFlow Print Server · cert.ssi.gouv.fr
• CERTA-2013-AVI-146 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
• CERTA-2013-AVI-088 — Multiples vulnérabilités dans VMware vSphere · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

• cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* ≤ 19.0.1084.45
• cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* ≤ 6.1.4
• cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*
• +9 autres

Produits affectés

Références

• http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75607
• http://rhn.redhat.com/errata/RHSA-2013-0217.html
• http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
• http://support.apple.com/kb/HT6001
• http://www.securitytracker.com/id?1027067
• http://code.google.com/p/chromium/issues/detail?id=125462
• http://secunia.com/advisories/50658
• https://lists.opensuse.org/opensuse-updates/2012-06/msg00011.html
• http://secunia.com/advisories/54886
• http://support.apple.com/kb/HT5934
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:098
• http://secunia.com/advisories/49243
• http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html
• http://secunia.com/advisories/55568
• http://www.securityfocus.com/bid/53540
• http://www.debian.org/security/2012/dsa-2479
• http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:056
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Sources