libxslt: buffer overflow in libexslt RC4 encryption/decryption functions

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...

Moderate: Red Hat Security Advisory: libxslt security update

Updated libxslt packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. libxslt is a library for transforming XML files into other XML...

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow source: https://www.securityfocus.com/bid/30467/info The 'libxslt' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attack...

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow

source: https://www.securityfocus.com/bid/30467/info The 'libxslt' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker may exploit this issue to execute arbitrary code with the privileges ...

libxslt security update

1.1.17-2.0.1.el52.2 - Added libxslt-enterprise.patch and replaced doc/redhat.gif in tarball 1.1.17-2.el52.2 - fix various problems in libexslt RC4 encryption/decryption functions - resolves: rhbz456232...

[slackware-security] libxslt

New libxslt packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about the issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1767 Here are the details from the Slackware 12.1 ChangeLog:...

Slackware 12.0 / 12.1 / current : libxslt (SSA:2008-210-03)

New libxslt packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-03. The text itself is copyright ...

SuSE 10 Security Update : libxslt (ZYPP Patch Number 5343)

A libxslt XSL-match processing overflow has been fixed. CVE-2008-1767 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33196;...

openSUSE 10 Security Update : libxslt (libxslt-5263)

A libxslt XSL-match processing overflow has been fixed. CVE-2008-1767 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxslt-5263. The text description of thi...

libxslt memory corruption

XSL file parsing memory corruption...

[ GLSA 200806-02 ] libxslt: Execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200806-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200806-02 : libxslt: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-02 libxslt: Execution of arbitrary code Anthony de Almeida Lopes reported a vulnerability in libxslt when handling XSL style-sheet files, which could be exploited to trigger the use of uninitialized memory, e.g. in a call t...

libxslt: Execution of arbitrary code

Background Libxslt is the XSLT C library developed for the GNOME project. XSLT itself is an XML language to define transformations for XML. Description Anthony de Almeida Lopes reported a vulnerability in libxslt when handling XSL style-sheet files, which could be exploited to trigger the use of...

libxslt XSL文件处理缓冲区溢出漏洞

BUGTRAQ ID: 29312 CVECAN ID: CVE-2008-1767 Libxslt是为GNOME项目开发的XSLT C库，XSLT本身是用于定义XML转换的XML语言。 libxslt库在转换XML文档期间使用的固定大小的数组，如果XSL样式表文件中设置了特定的template match条件的话，则使用该库的应用程序在解析文件时会触发缓冲区溢出，导致应用程序崩溃或执行任意指令。 XMLSoft libxslt 1.1.24 Debian ------ Debian已经为此发布了一个安全公告（DSA-1589-1）以及相应补丁: DSA-1589-1：New libxs...

Debian DSA-1589-1 : libxslt - buffer overflow

It was discovered that libxslt, an XSLT processing runtime library, could be coerced into executing arbitrary code via a buffer overflow when an XSL style sheet file with a long XSLT 'transformation match' condition triggered a large number of steps. %NASLMINLEVEL 70300 C Tenable Network Security...

DSA-1589-1 libxslt - arbitrary code execution

Bulletin has no description...

[SECURITY] [DSA 1589-1] New libxslt packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1589-1 [email protected] http://www.debian.org/security/ Steve Kemp May 28, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Buffer overflow

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps...

DEBIAN-CVE-2008-1767

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps...

CVE-2008-1767

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps...