CVE-2011-3919 Memory corruption in n/a

High 7.5 Published 7 Jan 2012 Updated 6 Aug 2024

Remote attackers can cause denial of service or potentially execute code via a heap-based buffer overflow in the libxml2 library used by Chrome.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2011-3919?

CVE-2011-3919 is a high-severity memory corruption vulnerability in Apple Iphone Os, published on 7 Jan 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Weakness: CWE-787

Which versions are affected by CVE-2011-3919?

It affects 9 products.

Linux distribution packages (4)

`libxml2` Red Hat:rhel_eus:5.6	All versions	`0:2.6.26-2.1.2.8.el5_6.2`
`libxml2-debuginfo` Red Hat:rhel_eus:5.6	All versions	`0:2.6.26-2.1.2.8.el5_6.2`
`libxml2-devel` Red Hat:rhel_eus:5.6	All versions	`0:2.6.26-2.1.2.8.el5_6.2`
`libxml2-python` Red Hat:rhel_eus:5.6	All versions	`0:2.6.26-2.1.2.8.el5_6.2`

Products include Apple Iphone Os, Apple Mac Os X, Debian Debian Linux, Google Chrome, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server and 3 more.

How do I fix CVE-2011-3919?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2011-3919 being exploited?

There is no known exploitation of CVE-2011-3919 in the wild and no public exploit code.

All Apple Iphone Os vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-3919, GHSA-7c47-25cj-whfq, RHSA-2012:0104.