CVE-2015-8710
- State
- Published
- Severity
- Not scored
- Published
- Apr 11, 2016
- Updated
- Aug 6, 2024
- Reserved
- Dec 31, 2015
Description
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://hackerone.com/reports/57125#activity-384861
- https://bugzilla.gnome.org/show_bug.cgi?id=746048
- DSA-3430vendor-advisory
- [oss-security] 20150913 Re: libxml2 issue: out-of-bounds memory access when parsing an unclosed HTML commentmailing-list
- RHSA-2016:1089vendor-advisory
- https://git.gnome.org/browse/libxml2/commit/?id=e724879d964d774df9b7969fc846605aa1bac54c
- [oss-security] 20150419 libxml2 issue: out-of-bounds memory access when parsing an unclosed HTML commentmailing-list
- 79811vdb-entry
- [oss-security] 20151231 Re: libxml2 issue: out-of-bounds memory access when parsing an unclosed HTML commentmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.