1882 matches found
PT-2017-16267
Name of the Vulnerable Software and Affected Versions libxslt version 1.1.29 Google Chrome versions prior to 57.0.2987.98 for Mac, Windows, and Linux Google Chrome version prior to 57.0.2987.108 for Android Nokogiri versions prior to 1.7.2 Description The issue is related to the xsltAddTextString...
About the security content of iOS 9.2.1 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
XML External Entity (XXE) Injection
Overview nokogiri is an HTML, XML, SAX, and Reader parser, with the ability to search documents via XPath or CSS3 selectors. Affected versions of this Gem are vulnerable to XML External Entity XXE attacks. Nokogiri is affected by series of vulnerabilities in libxml2 and libxslt, which are librari...
Updated libxslt packages fix security vulnerability
A heap overread bug was found in libxslt, which can cause arbitrary code execution or denial of service CVE-2016-4738...
MGASA-2016-0394 Updated libxslt packages fix security vulnerability
A heap overread bug was found in libxslt, which can cause arbitrary code execution or denial of service CVE-2016-4738...
Debian: Security Advisory (DSA-3709-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 3709-1 (libxslt - security update)
Nick Wellnhofer discovered that the xsltFormatNumberConversion function in libxslt, an XSLT processing runtime library, does not properly check for a zero byte terminating the pattern string. This flaw can be exploited to leak a couple of bytes after the buffer that holds the pattern string...
Debian DSA-3709-1 : libxslt - security update
Nick Wellnhofer discovered that the xsltFormatNumberConversion function in libxslt, an XSLT processing runtime library, does not properly check for a zero byte terminating the pattern string. This flaw can be exploited to leak a couple of bytes after the buffer that holds the pattern string...
[SECURITY] [DSA 3709-1] libxslt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3709-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 08, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3709-1] libxslt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3709-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 08, 2016 https://www.debian.org/security/faq -...
DSA-3709-1 libxslt - security update
Bulletin has no description...
Debian DLA-700-1 : libxslt security update
A heap overread bug was found in libxslt, which can cause arbitrary code execution or denial of service. For Debian 7 'Wheezy', these problems have been fixed in version 1.1.26-14.1+deb7u2. We recommend that you upgrade your libxslt packages. NOTE: Tenable Network Security has extracted the...
[SECURITY] [DLA 700-1] libxslt security update
Package : libxslt Version : 1.1.26-14.1+deb7u2 CVE ID : CVE-2016-4738 Debian Bug : 842570 A heap overread bug was found in libxslt, which can cause arbitrary code execution or denial of service. For Debian 7 "Wheezy", these problems have been fixed in version 1.1.26-14.1+deb7u2. We recommend that...
DLA-700-1 libxslt - security update
Bulletin has no description...
The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.
The vulnerability of the libxslt component in Mac OS X and iOS operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a...
Apple iOS < 10.0 Multiple Vulnerabilities
Binary data 9619.prm...
Multiple Apple Products libxslt Memory Corruption Vulnerability
Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a smart TV operating system. libxslt is an XSLT...
Apple TV < 10 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 10. It is, therefore, affected by multiple vulnerabilities in the following components : - Audio - CFNetwork - CoreCrypto - FontParser - IOAcceleratorFamily - Kernel - libxml2 - libxslt - Security - WebKit Note that...
CVE-2016-4738
libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
DEBIAN-CVE-2016-4738
libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...