Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.
Affected Platforms
Apple SafariCanonical Ubuntu LinuxXmlsoft Libxml2Apple Mac Os XDebian Debian LinuxApple Iphone Os