CVE:CVE-2015-8806
CNNVD:CNNVD-201602-347
libxml2是一款使用C语言编写的用于解析XML文档的函数库。
Libxml2的dict.c文件中存在安全漏洞。远程攻击者可借助特制的HTML文档中的‘＜!DOCTYPE html’子串后不正确的字符利用该漏洞造成（基于堆的缓冲区越边界读取和应用程序崩溃）。
solution:Upgrade xmlsoft libxml2 to a higher version than 2.9.4,and avoid the version (,2.9.4); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0