Bug 3580

Summary: Security Advisory - libxml2 - CVE-2012-2871
Product: [Build System, Metadata & Runtime] OE-Core Reporter: Li Wang <li.wang>
Component: coreAssignee: Li Wang <li.wang>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Medium+ CC: jessica.zhang, li.wang, meta.mr.watcher, meta.watcher, sgw, song.liu, zhenfeng.zhao
Version: 1.4   
Target Milestone: Future   
Hardware: x86   
OS: Multiple   
Whiteboard: P3
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: ---

Description Li Wang 2012-12-13 05:39:41 UTC 
libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.Per:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2871