CVE-2016-5131: chrome before 52.0.2743.82 (exclusive); +17 more affected products

Affected technology

chrome · before 52.0.2743.82 (exclusive)
google

libxml2 · through 2.9.4 (inclusive)
xmlsoft

iphone os · before 10.0 (exclusive)
apple

mac os x · before 10.12 (exclusive)
apple

tvos · before 10.0 (exclusive)
apple

watchos · before 3.0 (exclusive)
apple

ubuntu linux · 14.04
canonical

ubuntu linux · 16.04
canonical

enterprise linux desktop · 6.0
redhat

enterprise linux server · 6.0
redhat

enterprise linux workstation · 6.0
redhat

leap · 42.1
opensuse

opensuse · 13.1
opensuse

opensuse · 13.2
opensuse

linux enterprise · 12.0
suse

debian linux · 8.0
debian

debian linux · 9.0
debian

n/a · n/a
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Description’s affected range: through 2.9.4, as used in Google Chrome before 52.0.2743.82,

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

The source says use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.