CVE Catalog
CVE-2017-8872
CriticalSummary
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 version 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
Risk Assessment
This vulnerability may lead to application disruption or sensitive data disclosure, posing a security threat to the organization.
Recommendation
It is recommended to update libxml2 to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.