CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
References
Link Resource
http://code.google.com/p/chromium/issues/detail?id=89402
http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
http://rhn.redhat.com/errata/RHSA-2013-0217.html
http://support.apple.com/kb/HT5281
http://support.apple.com/kb/HT5503
http://www.debian.org/security/2012/dsa-2394
http://www.mandriva.com/security/advisories?name=MDVSA-2011:145
http://www.redhat.com/support/errata/RHSA-2011-1749.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13840
http://code.google.com/p/chromium/issues/detail?id=89402
http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
http://rhn.redhat.com/errata/RHSA-2013-0217.html
http://support.apple.com/kb/HT5281
http://support.apple.com/kb/HT5503
http://www.debian.org/security/2012/dsa-2394
http://www.mandriva.com/security/advisories?name=MDVSA-2011:145
http://www.redhat.com/support/errata/RHSA-2011-1749.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13840
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:29

Type Values Removed Values Added
References () http://code.google.com/p/chromium/issues/detail?id=89402 - () http://code.google.com/p/chromium/issues/detail?id=89402 -
References () http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html - () http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html -
References () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 -
References () http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - () http://lists.apple.com/archives/security-announce/2012/May/msg00001.html -
References () http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - () http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html -
References () http://rhn.redhat.com/errata/RHSA-2013-0217.html - () http://rhn.redhat.com/errata/RHSA-2013-0217.html -
References () http://support.apple.com/kb/HT5281 - () http://support.apple.com/kb/HT5281 -
References () http://support.apple.com/kb/HT5503 - () http://support.apple.com/kb/HT5503 -
References () http://www.debian.org/security/2012/dsa-2394 - () http://www.debian.org/security/2012/dsa-2394 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:145 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:145 -
References () http://www.redhat.com/support/errata/RHSA-2011-1749.html - () http://www.redhat.com/support/errata/RHSA-2011-1749.html -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13840 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13840 -

07 Nov 2023, 02:07

Type Values Removed Values Added
References (CONFIRM) http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html - Vendor Advisory () http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html -
References (REDHAT) http://www.redhat.com/support/errata/RHSA-2011-1749.html - Third Party Advisory () http://www.redhat.com/support/errata/RHSA-2011-1749.html -
References (APPLE) http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - Mailing List, Third Party Advisory () http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html -
References (APPLE) http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - Mailing List, Third Party Advisory () http://lists.apple.com/archives/security-announce/2012/May/msg00001.html -
References (CONFIRM) http://code.google.com/p/chromium/issues/detail?id=89402 - Exploit, Vendor Advisory () http://code.google.com/p/chromium/issues/detail?id=89402 -
References (HP) http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - Broken Link () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 -
References (MANDRIVA) http://www.mandriva.com/security/advisories?name=MDVSA-2011:145 - Third Party Advisory () http://www.mandriva.com/security/advisories?name=MDVSA-2011:145 -
References (REDHAT) http://rhn.redhat.com/errata/RHSA-2013-0217.html - Third Party Advisory () http://rhn.redhat.com/errata/RHSA-2013-0217.html -
References (DEBIAN) http://www.debian.org/security/2012/dsa-2394 - Third Party Advisory () http://www.debian.org/security/2012/dsa-2394 -
References (CONFIRM) http://support.apple.com/kb/HT5503 - Third Party Advisory () http://support.apple.com/kb/HT5503 -
References (CONFIRM) http://support.apple.com/kb/HT5281 - Third Party Advisory () http://support.apple.com/kb/HT5281 -

Information

Published : 2011-08-29 15:55

Updated : 2024-11-21 01:29


NVD link : CVE-2011-2821

Mitre link : CVE-2011-2821

CVE.ORG link : CVE-2011-2821


JSON object : View

Products Affected

apple

  • mac_os_x
  • iphone_os

google

  • chrome

redhat

  • enterprise_linux_desktop
  • enterprise_linux_workstation
  • enterprise_linux_eus
  • enterprise_linux_server

debian

  • debian_linux
CWE
CWE-415

Double Free