CVE-2015-8241

The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

Date published : 2015-12-15

http://www.securityfocus.com/bid/77621

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html