CVE-2008-2935

2008-08-0114:41:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-2935

libxslt

buffer overflow

encryption

decryption

xml

nvd

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.18 Low

EPSS

Percentile

96.1%

JSON

Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (aka exsltCryptoRc4DecryptFunction) functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containing a long string as “an argument in the XSL input.”

CPENameOperatorVersion
xmlsoft:libxsltxmlsoft libxslteq1.1.11
xmlsoft:libxsltxmlsoft libxslteq1.1.8
xmlsoft:libxsltxmlsoft libxslteq1.1.15
xmlsoft:libxsltxmlsoft libxslteq1.1.19
xmlsoft:libxsltxmlsoft libxslteq1.1.23
xmlsoft:libxsltxmlsoft libxslteq1.1.14
xmlsoft:libxsltxmlsoft libxslteq1.1.24
xmlsoft:libxsltxmlsoft libxslteq1.1.18
xmlsoft:libxsltxmlsoft libxslteq1.1.10
xmlsoft:libxsltxmlsoft libxslteq1.1.21

CPE	Name	Operator	Version
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.11
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.8
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.15
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.19
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.23
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.14
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.24
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.18
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.10
xmlsoft:libxslt	xmlsoft libxslt	eq	1.1.21