CVE:CVE-2013-2877
CNNVD:CNNVD-201307-199
Libxml2是GNOME项目组所研发的一个基于C语言的用来解析XML文档的函数库，它支持多种编码格式、Xpath解析、Well-formed和valid验证等。Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。
Google Chrome 28.0.1500.70及之前的版本和其他产品中使用的libxml2 2.9.0:rc1及之前的版本中的parser.c中存在漏洞，该漏洞源于程序缺少对XML_PARSER_EOF状态的检查。远程攻击者可通过突然终止文档利用该漏洞造成拒绝服务（越边界读取）。
solution:Upgrade google chrome to a higher version than 28.0.1500.70,28.0.1500.0,28.0.1500.2,28.0.1500.3,28.0.1500.4,28.0.1500.5,28.0.1500.6,28.0.1500.8,28.0.1500.9,28.0.1500.10,28.0.1500.11,28.0.1500.12,28.0.1500.13,28.0.1500.14,28.0.1500.15,28.0.1500.16,28.0.1500.17,28.0.1500.18,28.0.1500.19,28.0.1500.20,28.0.1500.21,28.0.1500.22,28.0.1500.23,28.0.1500.24,28.0.1500.25,28.0.1500.26,28.0.1500.27,28.0.1500.28,28.0.1500.29,28.0.1500.31,28.0.1500.32,28.0.1500.33,28.0.1500.34,28.0.1500.35,28.0.1500.36,28.0.1500.37,28.0.1500.38,28.0.1500.39,28.0.1500.40,28.0.1500.41,28.0.1500.42,28.0.1500.43,28.0.1500.44,28.0.1500.45,28.0.1500.46,28.0.1500.47,28.0.1500.48,28.0.1500.49,28.0.1500.50,28.0.1500.51,28.0.1500.52,28.0.1500.53,28.0.1500.54,28.0.1500.56,28.0.1500.58,28.0.1500.59,28.0.1500.60,28.0.1500.61,28.0.1500.62,28.0.1500.63,28.0.1500.64,28.0.1500.66,28.0.1500.68,and avoid the version (,28.0.1500.70],28.0.1500.0,28.0.1500.2,28.0.1500.3,28.0.1500.4,28.0.1500.5,28.0.1500.6,28.0.1500.8,28.0.1500.9,28.0.1500.10,28.0.1500.11,28.0.1500.12,28.0.1500.13,28.0.1500.14,28.0.1500.15,28.0.1500.16,28.0.1500.17,28.0.1500.18,28.0.1500.19,28.0.1500.20,28.0.1500.21,28.0.1500.22,28.0.1500.23,28.0.1500.24,28.0.1500.25,28.0.1500.26,28.0.1500.27,28.0.1500.28,28.0.1500.29,28.0.1500.31,28.0.1500.32,28.0.1500.33,28.0.1500.34,28.0.1500.35,28.0.1500.36,28.0.1500.37,28.0.1500.38,28.0.1500.39,28.0.1500.40,28.0.1500.41,28.0.1500.42,28.0.1500.43,28.0.1500.44,28.0.1500.45,28.0.1500.46,28.0.1500.47,28.0.1500.48,28.0.1500.49,28.0.1500.50,28.0.1500.51,28.0.1500.52,28.0.1500.53,28.0.1500.54,28.0.1500.56,28.0.1500.58,28.0.1500.59,28.0.1500.60,28.0.1500.61,28.0.1500.62,28.0.1500.63,28.0.1500.64,28.0.1500.66,28.0.1500.68; Upgrade xmlsoft libxml2 to a higher version than *:rc1,1.7.0,1.7.1,1.7.2,1.7.3,1.7.4,1.8.0,1.8.1,1.8.2,1.8.3,1.8.4,1.8.5,1.8.6,1.8.7,1.8.9,1.8.10,1.8.13,1.8.14,1.8.16,2.0.0,2.1.0,2.1.1,2.2.0,2.2.0:beta,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8,2.2.9,2.2.10,2.2.11,2.3.0,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.3.8,2.3.9,2.3.10,2.3.11,2.3.12,2.3.13,2.3.14,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.11,2.4.12,2.4.13,2.4.14,2.4.15,2.4.16,2.4.17,2.4.18,2.4.19,2.4.20,2.4.21,2.4.22,2.4.23,2.4.24,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29,2.4.30,2.5.0,2.5.4,2.5.7,2.5.8,2.5.10,2.5.11,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,2.6.8,2.6.9,2.6.11,2.6.12,2.6.13,2.6.14,2.6.16,2.6.17,2.6.18,2.6.20,2.6.21,2.6.22,2.6.23,2.6.24,2.6.25,2.6.26,2.6.27,2.6.28,2.6.29,2.6.30,2.6.31,2.6.32,2.7.0,2.7.1,2.7.2,2.7.3,2.7.4,2.7.5,2.7.6,2.7.7,2.7.8,2.8.0,and avoid the version *:rc1,1.7.0,1.7.1,1.7.2,1.7.3,1.7.4,1.8.0,1.8.1,1.8.2,1.8.3,1.8.4,1.8.5,1.8.6,1.8.7,1.8.9,1.8.10,1.8.13,1.8.14,1.8.16,2.0.0,2.1.0,2.1.1,2.2.0,2.2.0:beta,2.2.1,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8,2.2.9,2.2.10,2.2.11,2.3.0,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.3.8,2.3.9,2.3.10,2.3.11,2.3.12,2.3.13,2.3.14,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.11,2.4.12,2.4.13,2.4.14,2.4.15,2.4.16,2.4.17,2.4.18,2.4.19,2.4.20,2.4.21,2.4.22,2.4.23,2.4.24,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29,2.4.30,2.5.0,2.5.4,2.5.7,2.5.8,2.5.10,2.5.11,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,2.6.8,2.6.9,2.6.11,2.6.12,2.6.13,2.6.14,2.6.16,2.6.17,2.6.18,2.6.20,2.6.21,2.6.22,2.6.23,2.6.24,2.6.25,2.6.26,2.6.27,2.6.28,2.6.29,2.6.30,2.6.31,2.6.32,2.7.0,2.7.1,2.7.2,2.7.3,2.7.4,2.7.5,2.7.6,2.7.7,2.7.8,2.8.0