CVE-2008-2935

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...

USN-633-1: libxslt vulnerabilities

It was discovered that long transformation matches in libxslt could overflow. If an attacker were able to make an application linked against libxslt process malicious XSL style sheet input, they could execute arbitrary code with user privileges or cause the application to crash, leading to a deni...

Security update for the information disclosure vulnerability in Visual Studio 2012 Update 5 (KB4506162)

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files...

Security update for the information disclosure vulnerability in Visual Studio 2013 Update 5 (KB4506163)

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files...

Security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1 (KB4506161)

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files...