numbers.c in libxslt prior to 1.1.29, as used in Google Chrome prior to 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote malicious users to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
google chrome |
||
xmlsoft libxslt |
Vulmon