Libxml2 contains an off-by-one overflow condition in the 'xmlCharEncFirstLineInt' and 'xmlCharEncInFunc' functions in encoding.c. With specially crafted XML content, an attacker can cause a limited buffer overflow, resulting in a denial of service or potentially execution of arbitrary code.

It has been reported that this issue has been fixed. Upgrade to version 2.8.0, or higher, to address this vulnerability.

Upgrade to Apple Safari version 5.1 or 5.0.6 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• CVE ID: 2011-0216 (see also: NVD)
• Secunia Advisory ID: 45325 46377 46415 47147 47538 47540 47637 47715 48959 49858 49930 51373 52051 52437
• Bugtraq ID: 48832
• Related OSVDB ID: 73989 73990 73991 73992 73993 73995 73996 73997 73998 73999 74000 74001 74002 74003 74004 74005 74006 74007 74008 74009 74010 74011 74012 74013 74014 74015 74016 74017 74018 74019
• Mail List Post: http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
  http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
  http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html
  http://seclists.org/bugtraq/2011/Oct/72
  http://seclists.org/bugtraq/2011/Oct/73
• Packet Storm: http://packetstormsecurity.org/files/112296/VMware-Security-Advisory-2012-0008.html
• Vendor Specific Advisory URL: http://support.apple.com/kb/HT4808
  http://support.apple.com/kb/HT4999
  http://support.apple.com/kb/HT5001/
  http://www.vmware.com/security/advisories/VMSA-2012-0012.html
  http://www.xerox.com/download/security/security-bulletin/16aeb-4cd3628b94080/cert_XRX12-009_v1.1.pdf
  https://blogs.oracle.com/sunsecurity/entry/cve_2011_0216_denial_of
• News Article: http://www.computerworld.com/s/article/9218534/Apple_delivers_OS_X_Lion_to_Mac_App_Store_
  http://www.computerworld.com/s/article/9218549/Apple_patches_58_Safari_bugs_to_deflect_drive_by_attacks
• Vendor Specific News/Changelog Entry: http://www.debian.org/security/2012/dsa-2394
  http://www.ubuntu.com/usn/usn-1334-1/
  http://www.vmware.com/security/advisories/VMSA-2012-0008.html
  https://bugzilla.redhat.com/show_bug.cgi?id=724906
• Other Advisory URL: http://www.mandriva.com/security/advisories?name=MDVSA-2011:188
• Vendor Specific Solution URL: https://git.gnome.org/browse/libxml2/commit/?id=69f04562f75212bfcabecd190ea8b06ace28ece2
• RedHat RHSA: RHSA-2011:1749 RHSA-2012:0016 RHSA-2012:0017 RHSA-2013:0217

• Billy Rios - Google Security Team