CVE-2015-8710
CriticalSummary
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive data and application instability, which can affect the availability of services within the organization.
Recommendation
It is recommended to update libxml2 to the latest version to mitigate the risks associated with this vulnerability and to monitor applications for unauthorized access.
Original NVD description (English source)
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.