Heap overflow

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...

CVE-2008-2935

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...

USN-633-1: libxslt vulnerabilities

It was discovered that long transformation matches in libxslt could overflow. If an attacker were able to make an application linked against libxslt process malicious XSL style sheet input, they could execute arbitrary code with user privileges or cause the application to crash, leading to a deni...

CVE-2008-2935

CVE-2008-2935 affects libxslt 1.1.8–1.1.24 via heap-based buffer overflows in the RC4 S-Box code in libexslt (exsltCryptoRc4EncryptFunction/exsltCryptoRc4DecryptFunction). An XML stylesheet containing a long string as an argument in the XSL input could allow a context-dependent attacker to execut...

CVE-2008-2935

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...

DTSA-152-1 libxslt - arbitrary code execution

Bulletin has no description...

[oCERT-2008-009] libxslt heap overflow

2008/07/31 2008-009 libxslt heap overflow Description: The libexslt library bundled with libxslt is affected by a heap-based buffer overflow which can lead to arbitrary code execution. The vulnerability is present in the rc4 encryption/decryption functions. An arbitrary length string, passed as a...

libxslt multiple security vulnerabilities

Heap buffer overflow, invalid digital signature check...

Debian DSA-1624-1 : libxslt - buffer overflows

Chris Evans discovered that a buffer overflow in the RC4 functions of libexslt may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1624. The text...

RHEL 4 / 5 : libxslt (RHSA-2008:0649)

Updated libxslt packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libxslt is a library for transforming XML files into other XML...

[SECURITY] [DSA 1624-1] New libxslt packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...

libxslt security update

CentOS Errata and Security Advisory CESA-2008:0649 Updated libxslt packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libxslt is a...

Moderate: Red Hat Security Advisory: libxslt security update

Updated libxslt packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libxslt is a library for transforming XML files into other XML...

libxslt: buffer overflow in libexslt RC4 encryption/decryption functions

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow source: https://www.securityfocus.com/bid/30467/info The 'libxslt' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attack...

libxslt security update

1.1.17-2.0.1.el52.2 - Added libxslt-enterprise.patch and replaced doc/redhat.gif in tarball 1.1.17-2.el52.2 - fix various problems in libexslt RC4 encryption/decryption functions - resolves: rhbz456232...

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow

source: https://www.securityfocus.com/bid/30467/info The 'libxslt' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker may exploit this issue to execute arbitrary code with the privileges ...

[slackware-security] libxslt

New libxslt packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about the issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1767 Here are the details from the Slackware 12.1 ChangeLog:...

Slackware 12.0 / 12.1 / current : libxslt (SSA:2008-210-03)

New libxslt packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-03. The text itself is copyright ...

SuSE 10 Security Update : libxslt (ZYPP Patch Number 5343)

A libxslt XSL-match processing overflow has been fixed. CVE-2008-1767 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33196;...