CVE-2017-16931

parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.
Configurations

Configuration 1 (hide)

cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-11-23 21:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-16931

Mitre link : CVE-2017-16931

CVE.ORG link : CVE-2017-16931


JSON object : View

Products Affected

xmlsoft

  • libxml2
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer