Libxml2 contains an off-by-one overflow condition in the 'xmlXPtrEvalXPtrPart' function [xpointer.c] that is triggered as user-supplied input is not properly validated. With a specially crafted XML file, an attacker can cause a limited heap-based buffer overflow, resulting in a denial of service or potentially execution of arbitrary code.
Classification
Location:
Local / Remote
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
PoC Public
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
It has been reported that this issue has been fixed. Upgrade to version 2.8.0, or higher, to address this vulnerability.
Upgrade to Google Chrome version 19.0.1084.46 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
