Deskripsi CVE

libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.

Informasi CVE

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	6.8		AV:N/AC:M/Au:N/C:P/I:P/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Apple>>Iphone_os >> Version Hingga (termasuk) 6.1.4

Apple>>Iphone_os >> Version 1.0.0

Apple>>Iphone_os >> Version 1.0.1

Apple>>Iphone_os >> Version 1.0.2

Apple>>Iphone_os >> Version 1.1.0

Apple>>Iphone_os >> Version 1.1.1

Apple>>Iphone_os >> Version 1.1.2

Apple>>Iphone_os >> Version 1.1.3

Apple>>Iphone_os >> Version 1.1.4

Apple>>Iphone_os >> Version 1.1.5

Apple>>Iphone_os >> Version 2.0

Apple>>Iphone_os >> Version 2.0.0

Apple>>Iphone_os >> Version 2.0.1

Apple>>Iphone_os >> Version 2.0.2

Apple>>Iphone_os >> Version 2.1

Apple>>Iphone_os >> Version 2.1.1

Apple>>Iphone_os >> Version 2.2

Apple>>Iphone_os >> Version 2.2.1

Apple>>Iphone_os >> Version 3.0

Apple>>Iphone_os >> Version 3.0.1

Apple>>Iphone_os >> Version 3.1

Apple>>Iphone_os >> Version 3.1.2

Apple>>Iphone_os >> Version 3.1.3

Apple>>Iphone_os >> Version 3.2

Apple>>Iphone_os >> Version 3.2.1

Apple>>Iphone_os >> Version 3.2.2

Apple>>Iphone_os >> Version 4.0

Apple>>Iphone_os >> Version 4.0.1

Apple>>Iphone_os >> Version 4.0.2

Apple>>Iphone_os >> Version 4.1

Apple>>Iphone_os >> Version 4.2.1

Apple>>Iphone_os >> Version 4.2.5

Apple>>Iphone_os >> Version 4.2.8

Apple>>Iphone_os >> Version 4.3.0

Apple>>Iphone_os >> Version 4.3.1

Apple>>Iphone_os >> Version 4.3.2

Apple>>Iphone_os >> Version 4.3.3

Apple>>Iphone_os >> Version 4.3.5

Apple>>Iphone_os >> Version 5.0

Apple>>Iphone_os >> Version 5.0.1

Apple>>Iphone_os >> Version 5.1

Apple>>Iphone_os >> Version 5.1.1

Apple>>Iphone_os >> Version 6.0

Apple>>Iphone_os >> Version 6.0.1

Apple>>Iphone_os >> Version 6.0.2

Apple>>Iphone_os >> Version 6.1

Apple>>Iphone_os >> Version 6.1.2

Apple>>Iphone_os >> Version 6.1.3

Konfigurasi 0

Google>>Chrome >> Version Hingga (termasuk) 21.0.1180.88

Google>>Chrome >> Version 21.0.1180.0

Google>>Chrome >> Version 21.0.1180.1

Google>>Chrome >> Version 21.0.1180.2

Google>>Chrome >> Version 21.0.1180.31

Google>>Chrome >> Version 21.0.1180.32

Google>>Chrome >> Version 21.0.1180.33

Google>>Chrome >> Version 21.0.1180.34

Google>>Chrome >> Version 21.0.1180.35

Google>>Chrome >> Version 21.0.1180.36

Google>>Chrome >> Version 21.0.1180.37

Google>>Chrome >> Version 21.0.1180.38

Google>>Chrome >> Version 21.0.1180.39

Google>>Chrome >> Version 21.0.1180.41

Google>>Chrome >> Version 21.0.1180.46

Google>>Chrome >> Version 21.0.1180.47

Google>>Chrome >> Version 21.0.1180.48

Google>>Chrome >> Version 21.0.1180.49

Google>>Chrome >> Version 21.0.1180.50

Google>>Chrome >> Version 21.0.1180.51

Google>>Chrome >> Version 21.0.1180.52

Google>>Chrome >> Version 21.0.1180.53

Google>>Chrome >> Version 21.0.1180.54

Google>>Chrome >> Version 21.0.1180.55

Google>>Chrome >> Version 21.0.1180.56

Google>>Chrome >> Version 21.0.1180.57

Google>>Chrome >> Version 21.0.1180.59

Google>>Chrome >> Version 21.0.1180.60

Google>>Chrome >> Version 21.0.1180.61

Google>>Chrome >> Version 21.0.1180.62

Google>>Chrome >> Version 21.0.1180.63

Google>>Chrome >> Version 21.0.1180.64

Google>>Chrome >> Version 21.0.1180.68

Google>>Chrome >> Version 21.0.1180.69

Google>>Chrome >> Version 21.0.1180.70

Google>>Chrome >> Version 21.0.1180.71

Google>>Chrome >> Version 21.0.1180.72

Google>>Chrome >> Version 21.0.1180.73

Google>>Chrome >> Version 21.0.1180.74

Google>>Chrome >> Version 21.0.1180.75

Google>>Chrome >> Version 21.0.1180.76

Google>>Chrome >> Version 21.0.1180.77

Google>>Chrome >> Version 21.0.1180.78

Google>>Chrome >> Version 21.0.1180.79

Google>>Chrome >> Version 21.0.1180.80

Google>>Chrome >> Version 21.0.1180.81

Google>>Chrome >> Version 21.0.1180.82

Google>>Chrome >> Version 21.0.1180.83

Google>>Chrome >> Version 21.0.1180.84

Google>>Chrome >> Version 21.0.1180.85

Google>>Chrome >> Version 21.0.1180.86

Google>>Chrome >> Version 21.0.1180.87

Xmlsoft>>Libxml2 >> Version Hingga (termasuk) 2.9.0

Referensi

http://secunia.com/advisories/50838
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
Tags : vendor-advisory, x_refsource_APPLE

http://www.debian.org/security/2012/dsa-2555
Tags : vendor-advisory, x_refsource_DEBIAN

http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?r1=56276&r2=149930
Tags : x_refsource_CONFIRM

http://code.google.com/p/chromium/issues/detail?id=138673
Tags : x_refsource_CONFIRM

http://support.apple.com/kb/HT6001
Tags : x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/78179
Tags : vdb-entry, x_refsource_XF

http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/54886
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.apple.com/kb/HT5934
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
Tags : vendor-advisory, x_refsource_SUSE

https://chromiumcodereview.appspot.com/10824157
Tags : x_refsource_CONFIRM

http://www.mandriva.com/security/advisories?name=MDVSA-2012:164
Tags : vendor-advisory, x_refsource_MANDRIVA

http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/include/libxml/tree.h?view=log
Tags : x_refsource_CONFIRM

http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
Tags : vendor-advisory, x_refsource_APPLE

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.41%	–	–
2022-02-20	–	–	3.41%	–	–
2022-04-03	–	–	3.41%	–	–
2022-06-26	–	–	3.41%	–	–
2023-02-26	–	–	3.41%	–	–
2023-03-12	–	–	–	1.56%	–
2023-07-23	–	–	–	1.56%	–
2023-11-12	–	–	–	1.55%	–
2024-02-11	–	–	–	1.55%	–
2024-03-31	–	–	–	1.3%	–
2024-06-02	–	–	–	1.3%	–
2025-01-19	–	–	–	1.3%	–
2025-03-18	–	–	–	–	0.63%
2025-03-30	–	–	–	–	0.63%
2025-04-15	–	–	–	–	0.63%
2025-05-03	–	–	–	–	1.03%
2025-05-05	–	–	–	–	1.05%
2025-05-09	–	–	–	–	0.6%
2025-05-15	–	–	–	–	0.62%
2025-05-21	–	–	–	–	0.6%
2025-07-01	–	–	–	–	0.6%
2025-07-05	–	–	–	–	0.6%
2025-07-08	–	–	–	–	0.6%
2025-07-21	–	–	–	–	0.6%
2025-07-30	–	–	–	–	0.6%
2025-08-05	–	–	–	–	0.6%
2025-08-23	–	–	–	–	0.6%
2025-08-24	–	–	–	–	0.6%
2025-08-27	–	–	–	–	0.6%
2025-09-26	–	–	–	–	1.05%
2025-11-18	–	–	–	–	1.05%
2025-11-21	–	–	–	–	1.05%
2026-02-22	–	–	–	–	0.78%
2026-03-01	–	–	–	–	0.78%
2026-03-08	–	–	–	–	0.78%
2026-03-15	–	–	–	–	0.78%
2026-03-22	–	–	–	–	0.78%
2026-06-14	–	–	–	–	0.45%

Tanggal	Persentil
2022-02-06	66%
2022-02-20	67%
2022-04-03	83%
2022-06-26	84%
2023-02-26	85%
2023-03-12	85%
2023-07-23	86%
2023-11-12	86%
2024-02-11	87%
2024-03-31	86%
2024-06-02	86%
2025-01-19	86%
2025-03-18	69%
2025-03-30	68%
2025-04-15	69%
2025-05-03	76%
2025-05-05	76%
2025-05-09	68%
2025-05-15	69%
2025-05-21	68%
2025-07-01	69%
2025-07-05	68%
2025-07-08	69%
2025-07-21	68%
2025-07-30	69%
2025-08-05	68%
2025-08-23	69%
2025-08-24	68%
2025-08-27	69%
2025-09-26	77%
2025-11-18	76%
2025-11-21	77%
2026-02-22	73%
2026-03-01	74%
2026-03-08	73%
2026-03-15	73%
2026-03-22	74%
2026-06-14	64%

CVE-2012-2871 : Detail

CVE-2012-2871

Deskripsi CVE

Informasi CVE

Metrik

EPSS

Skor EPSS

Persentil EPSS

Produk yang Disebutkan

Konfigurasi 0

Konfigurasi 0

Referensi