CVE-2012-2870
CVE-2012-2870
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.
EPSS 2.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://code.google.com/p/chromium/issues/detail?id=138672
- https://chromiumcodereview.appspot.com/10823168
- http://secunia.com/advisories/50838
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://www.debian.org/security/2012/dsa-2555
- http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?r1=75684&r2=149998
- http://support.apple.com/kb/HT6001
- http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
- http://secunia.com/advisories/54886
- http://support.apple.com/kb/HT5934
- http://code.google.com/p/chromium/issues/detail?id=140368
- https://chromiumcodereview.appspot.com/10830177
- http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?view=log
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:164
- http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?view=log
- http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?r1=118654&r2=150123
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-2870