CVE-2009-2416
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 1.8%
exploitation probability
1.8%top 22% of all CVEs
observed exploitation
nono source reports it
Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
n/a · n/aReferences
http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.htmlhttp://lists.apple.com/archives/security-announce/2009/Nov/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2009/Nov/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2010/Jun/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=515205http://secunia.com/advisories/35036http://secunia.com/advisories/36207http://secunia.com/advisories/36338http://secunia.com/advisories/36417http://secunia.com/advisories/36631http://secunia.com/advisories/37346