2113 matches found
Scientific Linux Security Update : libxslt on SL3.x, SL4.x, SL5.x i386/x86_64
Anthony de Almeida Lopes reported the libxslt library did not properly process long 'transformation match' conditions in the XSL stylesheet files. An attacker could create a malicious XSL file that would cause a crash, or, possibly, execute and arbitrary code with the privileges of the applicatio...
Scientific Linux Security Update : libxslt on SL4.x, SL5.x i386/x86_64
A heap buffer overflow flaw was discovered in the RC4 libxslt library extension. An attacker could create a malicious XSL file that would cause a crash, or, possibly, execute arbitrary code with the privileges of the application using the libxslt library to perform XSL transformations on untruste...
libxslt DoS
No description provided...
[ MDVSA-2012:109 ] libxslt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:109 http://www.mandriva.com/security/ Package : libxslt Date : July 23, 2012 Affected: 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in libxslt: The XSL...
Mandriva Update for libxslt MDVSA-2012:109 (libxslt)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SuSE 10 Security Update : libxslt (ZYPP Patch Number 8207)
The following issue has been fixed : - Specially crafted XSL documents could have crashed libxslt. CVE-2012-2825 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
php: XSLT file writing vulnerability
PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension...
SuSE 10 Security Update : libxslt (ZYPP Patch Number 8019)
libxslt was prone to an out-of-bounds read flaw when parsing certain patterns CVE-2011-3970. This could have lead to a denial of service and is fixed with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
SuSE 11.1 Security Update : libxslt (SAT Patch Number 5810)
libxslt was prone to an out-of-bounds read flaw when parsing certain patterns CVE-2011-3970. This could have lead to a Denial of Service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...
Gentoo Security Advisory GLSA 201203-08 (libxslt)
The remote host is missing updates announced in advisory GLSA 201203-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 201203-08 (libxslt)
The remote host is missing updates announced in advisory GLSA 201203-08. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
libxslt out-of-bounds read
No description provided...
[ MDVSA-2012:028 ] libxslt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:028 http://www.mandriva.com/security/ Package : libxslt Date : March 1, 2012 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in libxslt: libxs...
Mandriva Update for libxslt MDVSA-2012:028 (libxslt)
Check for the Version of libxslt OpenVAS Vulnerability Test Mandriva Update for libxslt MDVSA-2012:028 libxslt Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Update for libxslt MDVSA-2012:028 (libxslt)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
libxslt: Denial of service
Background libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML. Description An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact A remote attacker could entice a user to process an XML file using a...
GLSA-201203-08 : libxslt: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201203-08 libxslt: Denial of Service An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact : A remote attacker could entice a user to process an XML file using a specially crafted XSLT stylesheet in an...
Mandriva Linux Security Advisory : libxslt (MDVSA-2012:028)
A vulnerability has been found and corrected in libxslt : libxslt allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors CVE-2011-3970. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Ubuntu: Security Advisory (USN-1358-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2019-4823
Name of the Vulnerable Software and Affected Versions libxslt versions prior to 1.1.33 Nokogiri versions prior to 1.10.5 Description The issue is related to a type confusion in the xsltNumberFormatGetMultipleLevel function, which could allow attackers to potentially exploit heap corruption via...