4.3

CVE-2012-2870

libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version <= 6.1.4
Apple ≫ iPhone OS Version 1.0.0
Apple ≫ iPhone OS Version 1.0.1
Apple ≫ iPhone OS Version 1.0.2
Apple ≫ iPhone OS Version 1.1.0
Apple ≫ iPhone OS Version 1.1.1
Apple ≫ iPhone OS Version 1.1.2
Apple ≫ iPhone OS Version 1.1.3
Apple ≫ iPhone OS Version 1.1.4
Apple ≫ iPhone OS Version 1.1.5
Apple ≫ iPhone OS Version 2.0
Apple ≫ iPhone OS Version 2.0.0
Apple ≫ iPhone OS Version 2.0.1
Apple ≫ iPhone OS Version 2.0.2
Apple ≫ iPhone OS Version 2.1
Apple ≫ iPhone OS Version 2.1.1
Apple ≫ iPhone OS Version 2.2
Apple ≫ iPhone OS Version 2.2.1
Apple ≫ iPhone OS Version 3.0
Apple ≫ iPhone OS Version 3.0.1
Apple ≫ iPhone OS Version 3.1
Apple ≫ iPhone OS Version 3.1.2
Apple ≫ iPhone OS Version 3.1.3
Apple ≫ iPhone OS Version 3.2
Apple ≫ iPhone OS Version 3.2.1
Apple ≫ iPhone OS Version 3.2.2
Apple ≫ iPhone OS Version 4.0
Apple ≫ iPhone OS Version 4.0.1
Apple ≫ iPhone OS Version 4.0.2
Apple ≫ iPhone OS Version 4.1
Apple ≫ iPhone OS Version 4.2.1
Apple ≫ iPhone OS Version 4.2.5
Apple ≫ iPhone OS Version 4.2.8
Apple ≫ iPhone OS Version 4.3.0
Apple ≫ iPhone OS Version 4.3.1
Apple ≫ iPhone OS Version 4.3.2
Apple ≫ iPhone OS Version 4.3.3
Apple ≫ iPhone OS Version 4.3.5
Apple ≫ iPhone OS Version 5.0
Apple ≫ iPhone OS Version 5.0.1
Apple ≫ iPhone OS Version 5.1
Apple ≫ iPhone OS Version 5.1.1
Apple ≫ iPhone OS Version 6.0
Apple ≫ iPhone OS Version 6.0.1
Apple ≫ iPhone OS Version 6.0.2
Apple ≫ iPhone OS Version 6.1
Apple ≫ iPhone OS Version 6.1.2
Apple ≫ iPhone OS Version 6.1.3
Google ≫ Chrome Version <= 21.0.1180.88
Google ≫ Chrome Version 21.0.1180.0
Google ≫ Chrome Version 21.0.1180.1
Google ≫ Chrome Version 21.0.1180.2
Google ≫ Chrome Version 21.0.1180.31
Google ≫ Chrome Version 21.0.1180.32
Google ≫ Chrome Version 21.0.1180.33
Google ≫ Chrome Version 21.0.1180.34
Google ≫ Chrome Version 21.0.1180.35
Google ≫ Chrome Version 21.0.1180.36
Google ≫ Chrome Version 21.0.1180.37
Google ≫ Chrome Version 21.0.1180.38
Google ≫ Chrome Version 21.0.1180.39
Google ≫ Chrome Version 21.0.1180.41
Google ≫ Chrome Version 21.0.1180.46
Google ≫ Chrome Version 21.0.1180.47
Google ≫ Chrome Version 21.0.1180.48
Google ≫ Chrome Version 21.0.1180.49
Google ≫ Chrome Version 21.0.1180.50
Google ≫ Chrome Version 21.0.1180.51
Google ≫ Chrome Version 21.0.1180.52
Google ≫ Chrome Version 21.0.1180.53
Google ≫ Chrome Version 21.0.1180.54
Google ≫ Chrome Version 21.0.1180.55
Google ≫ Chrome Version 21.0.1180.56
Google ≫ Chrome Version 21.0.1180.57
Google ≫ Chrome Version 21.0.1180.59
Google ≫ Chrome Version 21.0.1180.60
Google ≫ Chrome Version 21.0.1180.61
Google ≫ Chrome Version 21.0.1180.62
Google ≫ Chrome Version 21.0.1180.63
Google ≫ Chrome Version 21.0.1180.64
Google ≫ Chrome Version 21.0.1180.68
Google ≫ Chrome Version 21.0.1180.69
Google ≫ Chrome Version 21.0.1180.70
Google ≫ Chrome Version 21.0.1180.71
Google ≫ Chrome Version 21.0.1180.72
Google ≫ Chrome Version 21.0.1180.73
Google ≫ Chrome Version 21.0.1180.74
Google ≫ Chrome Version 21.0.1180.75
Google ≫ Chrome Version 21.0.1180.76
Google ≫ Chrome Version 21.0.1180.77
Google ≫ Chrome Version 21.0.1180.78
Google ≫ Chrome Version 21.0.1180.79
Google ≫ Chrome Version 21.0.1180.80
Google ≫ Chrome Version 21.0.1180.81
Google ≫ Chrome Version 21.0.1180.82
Google ≫ Chrome Version 21.0.1180.83
Google ≫ Chrome Version 21.0.1180.84
Google ≫ Chrome Version 21.0.1180.85
Google ≫ Chrome Version 21.0.1180.86
Google ≫ Chrome Version 21.0.1180.87
Xmlsoft ≫ Libxslt Version <= 1.1.26
Xmlsoft ≫ Libxslt Version 1.1.8
Xmlsoft ≫ Libxslt Version 1.1.9
Xmlsoft ≫ Libxslt Version 1.1.10
Xmlsoft ≫ Libxslt Version 1.1.11
Xmlsoft ≫ Libxslt Version 1.1.12
Xmlsoft ≫ Libxslt Version 1.1.13
Xmlsoft ≫ Libxslt Version 1.1.14
Xmlsoft ≫ Libxslt Version 1.1.15
Xmlsoft ≫ Libxslt Version 1.1.16
Xmlsoft ≫ Libxslt Version 1.1.17
Xmlsoft ≫ Libxslt Version 1.1.18
Xmlsoft ≫ Libxslt Version 1.1.19
Xmlsoft ≫ Libxslt Version 1.1.20
Xmlsoft ≫ Libxslt Version 1.1.21
Xmlsoft ≫ Libxslt Version 1.1.22
Xmlsoft ≫ Libxslt Version 1.1.23
Xmlsoft ≫ Libxslt Version 1.1.24
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.46% 0.824
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.mandriva.com/security/advisories?name=MDVSA-2012:164
http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
http://secunia.com/advisories/54886
http://support.apple.com/kb/HT5934
http://support.apple.com/kb/HT6001
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00030.html
http://code.google.com/p/chromium/issues/detail?id=138672
http://code.google.com/p/chromium/issues/detail?id=140368
http://secunia.com/advisories/50838
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?r1=75684&r2=149998
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/functions.c?view=log
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?r1=118654&r2=150123
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxslt/libxslt/pattern.c?view=log
http://www.debian.org/security/2012/dsa-2555
https://chromiumcodereview.appspot.com/10823168
https://chromiumcodereview.appspot.com/10830177