[ MDVSA-2012:028 ] libxslt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:028 http://www.mandriva.com/security/ Package : libxslt Date : March 1, 2012 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in libxslt: libxs...

libxslt out-of-bounds read

No description provided...

Mandriva Update for libxslt MDVSA-2012:028 (libxslt)

Check for the Version of libxslt OpenVAS Vulnerability Test Mandriva Update for libxslt MDVSA-2012:028 libxslt Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libxslt MDVSA-2012:028 (libxslt)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

libxslt: Denial of service

Background libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML. Description An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact A remote attacker could entice a user to process an XML file using a...

GLSA-201203-08 : libxslt: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-08 libxslt: Denial of Service An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact : A remote attacker could entice a user to process an XML file using a specially crafted XSLT stylesheet in an...

Mandriva Linux Security Advisory : libxslt (MDVSA-2012:028)

A vulnerability has been found and corrected in libxslt : libxslt allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors CVE-2011-3970. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Ubuntu: Security Advisory (USN-1358-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : php5 vulnerabilities (USN-1358-1)

It was discovered that PHP computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters. CVE-2011-4885 ATTENTION: this update changes previous PHP...

CVE-2011-3970

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3970

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

DEBIAN-CVE-2011-3970

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

Out-of-bounds

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3970

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3970

CVE-2011-3970 affects libxslt as used in Google Chrome prior to 17.0.963.46, enabling a remote attacker to cause a denial of service via an out-of-bounds read (vectors not specified in the entry). The issue has been addressed in downstream advisories and Chrome updates; Chrome/SUSE/Fedora advisor...

CVE-2011-3970

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3970

libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

PHP 5.3.x libxslt安全限制绕过漏洞

BUGTRAQ ID: 51806 CVE ID: CVE-2012-0057 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP在libxslt安全设置上存在漏洞，可使远程攻击者通过使用了libxslt输出扩展的特制XSLT样式表创建任意文件。 0 PHP 5.3.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...

php: XSLT file writing vulnerability(CVE-2012-0057)

No description provided by source. Description: ------------ Current version of PHP5 allow creation of arbitrary files when processing XSLT content. This was tested on the following releases : - PHP 5.3.2-1ubuntu4.7 with Suhosin-Patch cli built: Jan 12 2011 18:36:08 - PHP 5.3.6 cli built: Apr 1...