CVE-2011-3102

Published: May 16, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.

Affected (49)

Products: Google: Chrome · Apple: Iphone Os

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Up to 19.0.1084.45

Configuration B

48 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 6.1.4
Apple Iphone Os	Version 1.0.0
Apple Iphone Os	Version 1.0.1
Apple Iphone Os	Version 1.0.2
Apple Iphone Os	Version 1.1.0
Apple Iphone Os	Version 1.1.1
Apple Iphone Os	Version 1.1.2
Apple Iphone Os	Version 1.1.3
Apple Iphone Os	Version 1.1.4
Apple Iphone Os	Version 1.1.5
Apple Iphone Os	Version 2.0.0
Apple Iphone Os	Version 2.0.1
Apple Iphone Os	Version 2.0.2
Apple Iphone Os	Version 2.0
Apple Iphone Os	Version 2.1.1
Apple Iphone Os	Version 2.1
Apple Iphone Os	Version 2.2.1
Apple Iphone Os	Version 2.2
Apple Iphone Os	Version 3.0.1
Apple Iphone Os	Version 3.0
Apple Iphone Os	Version 3.1.2
Apple Iphone Os	Version 3.1.3
Apple Iphone Os	Version 3.1
Apple Iphone Os	Version 3.2.1
Apple Iphone Os	Version 3.2.2
Apple Iphone Os	Version 3.2
Apple Iphone Os	Version 4.0.1
Apple Iphone Os	Version 4.0.2
Apple Iphone Os	Version 4.0
Apple Iphone Os	Version 4.1
Apple Iphone Os	Version 4.2.1
Apple Iphone Os	Version 4.2.5
Apple Iphone Os	Version 4.2.8
Apple Iphone Os	Version 4.3.0
Apple Iphone Os	Version 4.3.1
Apple Iphone Os	Version 4.3.2
Apple Iphone Os	Version 4.3.3
Apple Iphone Os	Version 4.3.5
Apple Iphone Os	Version 5.0.1
Apple Iphone Os	Version 5.0
Apple Iphone Os	Version 5.1.1
Apple Iphone Os	Version 5.1
Apple Iphone Os	Version 6.0.1
Apple Iphone Os	Version 6.0.2
Apple Iphone Os	Version 6.0
Apple Iphone Os	Version 6.1.2
Apple Iphone Os	Version 6.1.3
Apple Iphone Os	Version 6.1

Related CWEs

References (42)

http://code.google.com/p/chromium/issues/detail?id=125462

Source: cve@mitre.org

Vendor Advisory

http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html

Source: cve@mitre.org

Vendor Advisory

http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2013-0217.html

Source: cve@mitre.org

http://secunia.com/advisories/49243

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/50658

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/54886

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/55568

Source: cve@mitre.org

http://support.apple.com/kb/HT5934

Source: cve@mitre.org

Vendor Advisory

http://support.apple.com/kb/HT6001

Source: cve@mitre.org

http://www.debian.org/security/2012/dsa-2479

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2012:098

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2013:056

Source: cve@mitre.org

http://www.securityfocus.com/bid/53540

Source: cve@mitre.org

http://www.securitytracker.com/id?1027067

Source: cve@mitre.org

http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/75607

Source: cve@mitre.org

https://lists.opensuse.org/opensuse-updates/2012-06/msg00011.html

Source: cve@mitre.org

http://code.google.com/p/chromium/issues/detail?id=125462

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0217.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49243

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/50658

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/54886

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/55568

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT5934

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT6001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2479

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2012:098

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:056

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/53540

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1027067

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/75607

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.opensuse.org/opensuse-updates/2012-06/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.