Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < c909ab41df2b09cde919801c7a7b6bb2cc37ea22 |