CVE-2011-2821

Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
googlechrome
𝑥
< 13.0.782.215
debiandebian_linux
5.0
debiandebian_linux
6.0
debiandebian_linux
7.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
6.3
redhatenterprise_linux_server
6.0
redhatenterprise_linux_workstation
6.0
appleiphone_os
𝑥
< 6.0
applemac_os_x
𝑥
< 10.7.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxml2
bullseye
2.9.10+dfsg-6.7+deb11u4
fixed
squeeze
no-dsa
bullseye (security)
2.9.10+dfsg-6.7+deb11u5
fixed
bookworm
2.9.14+dfsg-1.3~deb12u1
fixed
sid
2.12.7+dfsg+really2.9.14-0.1
fixed
trixie
2.12.7+dfsg+really2.9.14-0.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
oneiric
not-affected
natty
Fixed 14.0.835.202~r103287-0ubuntu0.11.04.1
released
maverick
Fixed 14.0.835.202~r103287-0ubuntu0.10.10.1
released
lucid
Fixed 14.0.835.202~r103287-0ubuntu0.10.04.2
released
hardy
dne
libxml2
oneiric
Fixed 2.7.8.dfsg-4ubuntu0.1
released
natty
Fixed 2.7.8.dfsg-2ubuntu0.2
released
maverick
Fixed 2.7.7.dfsg-4ubuntu0.3
released
lucid
Fixed 2.7.6.dfsg-1ubuntu1.3
released
hardy
ignored
References