CVE:CVE-2016-4447
CNNVD:CNNVD-201605-637
libxml2是开源的一个用来解析XML文档的函数库。它用C语言写成，并且能为多种语言所调用，例如C语言，C++，XSH。
Libxml2 2.9.4之前版本存在缓冲区错误漏洞，该漏洞源于基于堆的缓冲区读取不足。攻击者利用该漏洞通过特制文件造成拒绝服务。
solution:Upgrade hp icewall_federation_agent to a higher version than 3.0,and avoid the version 3.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade oracle vm_server to a higher version than 3.3,3.4,and avoid the version 3.3,3.4; Upgrade apple itunes to a higher version than 12.4.1,and avoid the version 12.4.1; Upgrade apple iphone_os to a higher version than 9.3.2,and avoid the version (,9.3.2]; Upgrade apple mac_os_x to a higher version than 10.11.5,and avoid the version (,10.11.5]; Upgrade apple tvos to a higher version than 9.2.1,and avoid the version (,9.2.1]; Upgrade apple watchos to a higher version than 2.2.1,and avoid the version (,2.2.1]; Upgrade xmlsoft libxml2 to a higher version than 2.9.3,and avoid the version (,2.9.3]; Upgrade mcafee web_gateway to a higher version than 7.5.2.10,7.6.2.3,and avoid the version [7.5.0.0,7.5.2.10],[7.6.0.0,7.6.2.3]