4 matches found
Denial Of Service (DoS)
libxslt.so is vulnerable to denial of service. The function xsltCopyText fails to reset ctxt-lasttext in some cases and results in a bound check failure, causing buffer overflow and potential disclosure of uninitialized data containing confidential information...
Authorization Bypass
libxslt.so is vulnerable to authorization bypass. The callers of xsltCheckRead and xsltCheckWrite allow access upon receiving a -1 error code, which is invalid for a URL but is subsequently loaded...
Denial Of Service (DoS)
libxslt.so is vulnerable to denial of service attacks. The application does not properly handle i format token for xsl:number data, allowing a malicious user to pass a file to the application to cause a integer overflow that can crash the application or cause arbitrary code to be executed...
Denial Of Service (DoS)
libxslt.so is vulnerable to denial of service DoS attacks. The library does not properly handle namespace nodes, allowing a malicious user to pass a file to the application to cause an out-of-bounds memory heap-access that can crash the application or execute arbitrary code...