Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xmlsoft libxslt 1.1.20 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-2935
Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 up to and including 1.1.24 allow context-dependent malicious users to execu...
Xmlsoft Libxslt 1.1.10Xmlsoft Libxslt 1.1.11Xmlsoft Libxslt 1.1.19Xmlsoft Libxslt 1.1.20Xmlsoft Libxslt 1.1.14Xmlsoft Libxslt 1.1.15Xmlsoft Libxslt 1.1.16Xmlsoft Libxslt 1.1.23Xmlsoft Libxslt 1.1.24Xmlsoft Libxslt 1.1.12Xmlsoft Libxslt 1.1.13Xmlsoft Libxslt 1.1.21Xmlsoft Libxslt 1.1.22Xmlsoft Libxslt 1.1.17Xmlsoft Libxslt 1.1.18Xmlsoft Libxslt 1.1.8Xmlsoft Libxslt 1.1.9
NA
CVE-2013-4520
xslt.c in libxslt prior to 1.1.25 allows context-dependent malicious users to cause a denial of service (crash) via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825.
Xmlsoft Libxslt 0.2.0Xmlsoft Libxslt 0.3.0Xmlsoft Libxslt 0.4.0Xmlsoft Libxslt 0.5.0Xmlsoft Libxslt 1.0.17Xmlsoft Libxslt 1.0.18Xmlsoft Libxslt 1.0.19Xmlsoft Libxslt 1.0.2Xmlsoft Libxslt 1.0.32Xmlsoft Libxslt 1.0.33Xmlsoft Libxslt 1.0.4Xmlsoft Libxslt 1.0.5Xmlsoft Libxslt 1.1.16Xmlsoft Libxslt 1.1.17Xmlsoft Libxslt 1.1.18Xmlsoft Libxslt 1.1.19Xmlsoft Libxslt 1.1.2Xmlsoft Libxslt 0.12.0Xmlsoft Libxslt 0.14.0Xmlsoft Libxslt 0.6.0Xmlsoft Libxslt 0.8.0Xmlsoft Libxslt 1.0.0
NA
CVE-2012-6139
libxslt prior to 1.1.28 allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functio...
Xmlsoft Libxslt 1.1.21Xmlsoft Libxslt 1.1.20Xmlsoft Libxslt 1.1.13Xmlsoft Libxslt 1.1.12Xmlsoft Libxslt 1.1.11Xmlsoft Libxslt 1.1.4Xmlsoft Libxslt 1.1.3Xmlsoft Libxslt 1.0.30Xmlsoft Libxslt 1.0.29Xmlsoft Libxslt 1.0.21Xmlsoft Libxslt 1.0.20Xmlsoft Libxslt 1.0.13Xmlsoft Libxslt 1.0.12Xmlsoft Libxslt 1.0.5Xmlsoft Libxslt 1.0.4Xmlsoft Libxslt 0.11.0Xmlsoft Libxslt 0.10.0Xmlsoft Libxslt 0.3.0Xmlsoft Libxslt 0.2.0Xmlsoft Libxslt 1.1.25Xmlsoft Libxslt 1.1.24Xmlsoft Libxslt 1.1.17
NA
CVE-2012-2870
libxslt 1.1.26 and previous versions, as used in Google Chrome prior to 21.0.1180.89, does not properly manage memory, which might allow remote malicious users to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XP...
Apple Iphone Os 6.1.2Apple Iphone Os 3.0Apple Iphone Os 3.2Apple Iphone Os 3.1.3Apple Iphone Os 1.0.2Apple Iphone Os 4.3.2Apple Iphone Os 4.0.2Apple Iphone OsApple Iphone Os 2.2Apple Iphone Os 1.1.1Apple Iphone Os 6.1.3Apple Iphone Os 5.1Apple Iphone Os 4.2.8Apple Iphone Os 6.0.2Apple Iphone Os 4.1Apple Iphone Os 2.0.0Apple Iphone Os 3.1.2Apple Iphone Os 3.0.1Apple Iphone Os 4.3.1Apple Iphone Os 4.2.5Apple Iphone Os 1.1.2Apple Iphone Os 3.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook